CVE-2010-1809

The CVE-2010-1809 entry concerns Apple iOS prior to 4.1, specifically the Accessibility VoiceOver feature failing to announce the location services icon on iPhone/iPod touch. The underlying issue is tied to the Accessibility component and VoiceOver handling, with impact and attack vectors not exp...

CVE-2010-1810

CVE-2010-1810 affects FaceTime on Apple iOS prior to 4.1 (iPhone/iPod touch). The issue is that invalid X.509 certificates are not handled properly, which can enable a man-in-the-middle to redirect calls with a crafted certificate. The vulnerability is tied to the handling of TLS/SSL certificates...

CVE-2010-1811

CVE-2010-1811 affects ImageIO in Apple iOS prior to 4.1, where a heap/buffer overflow in TIFF handling could allow a remote attacker to cause arbitrary code execution or a memory corruption/DoS in an affected device (iPhone/iPod touch). The provided documents specify the vulnerability class and i...

CVE-2010-1812

The connected MiracleLinux advisory AXSA:2011-34:01 references CVE-2010-1812 (Use-after-free in WebKit) affecting WebKitGTK+ and webkitgtk-1.2.6-2.AXS4. The vulnerability allows remote code execution or a denial of service via selections, described alongside other WebKit issues; the advisory indi...

CVE-2010-1814

MiracleLinux AXSA:2011-34:01 documents CVE-2010-1814 as one of several WebKitGTK+ vulnerabilities. Affected package: webkitgtk-1.2.6-2.AXS4. The advisory indicates these issues are fixed in that release and lists multiple CVEs addressed, including CVE-2010-1814. Remediation is to upgrade to the r...

CVE-2010-1817

CVE-2010-1817 describes a buffer overflow in ImageIO on Apple iOS prior to 4.1, exploitable via a crafted GIF file to allow remote code execution or cause a denial of service. Affected software: Apple iOS devices (iPhone/iPod touch) with ImageIO before 4.1. Root cause: overflow in GIF handling wi...

CVE-2010-1813

Removed by vendor...

CVE-2010-1815

CVE-2010-1815 is listed in MiracleLinux AXSA:2011-34:01 as part of a set of WebKitGTK+ related issues. The included description block confirms a WebKit use-after-free vulnerability affecting WebKit in Apple iOS prior to 4.1 and webkitgtk prior to 1.2.6, with potential remote code execution or den...

PT-2010-3449 · Apple · Imageio +1

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 4.1 Description: A buffer overflow issue in ImageIO allows remote attackers to execute arbitrary code or cause a denial of service via a crafted GIF file. Recommendations: For Apple iOS versions prior to 4.1, updat...

PT-2010-3442 · Apple · Ios

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 4.1 Description: The issue concerns the Accessibility component, specifically the VoiceOver feature, which does not announce the location services icon as expected. The impact and attack vectors of this issue are n...

PT-2010-3443 · Apple · Iphone +3

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 4.1 on the iPhone and iPod touch Description: The issue is related to the handling of invalid X.509 certificates in FaceTime, allowing man-in-the-middle attackers to redirect calls via a crafted certificate...

PT-2010-3446 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 4.1 Description: The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via vectors involving HTML object outlines...

CVE-2010-1814: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors involving form menus...

CVE-2010-1781: Undefined Security Weakness

Double free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors related to the rendering of an inline element...

CVE-2010-1809: Undefined Security Weakness

The Accessibility component in Apple iOS before 4.1 on the iPhone and iPod touch does not perform the expected VoiceOver announcement associated with the location services icon, which has unspecified impact and attack vectors...

CVE-2010-1810: Undefined Security Weakness

FaceTime in Apple iOS before 4.1 on the iPhone and iPod touch does not properly handle invalid X.509 certificates, which allows man-in-the-middle attackers to redirect calls via a crafted certificate...

CVE-2010-1811: Improper Restriction of Operations within the Bounds of a Memory Buffer

ImageIO in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted TIFF file...

CVE-2010-1817: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in ImageIO in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted GIF file...

Webkit Floating Point Datatype Remote Code Execution Vulnerability

Description WebKit is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks will cause denial-of-service conditions. Versions prior to Safari 5.0.2 and Safari 4.1.2 are...

DEBIAN-CVE-2010-1797

Multiple stack-based buffer overflows in the cffdecoderparsecharstrings function in the CFF Type2 CharStrings interpreter in cff/cffgload.c in FreeType before 2.4.2, as used in Apple iOS before 4.0.2 on the iPhone and iPod touch and before 3.2.2 on the iPad, allow remote attackers to execute...