48 matches found
Design/Logic Flaw
The Settings component in Apple iOS before 5, when a configuration profile is used for a locale other than English, does not properly implement localization, which makes it easier for attackers to have an unspecified impact by leveraging incorrect configuration display...
CVE-2011-3430: Undefined Security Weakness
The Settings component in Apple iOS before 5, when a configuration profile is used for a locale other than English, does not properly implement localization, which makes it easier for attackers to have an unspecified impact by leveraging incorrect configuration display...
PT-2011-4453
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 5 Description The issue is related to the Settings component in Apple iOS, where localization is not properly implemented when a configuration profile is used for a locale other than English. This incorrect...
CVE-2010-3827
Apple iOS before 4.2 does not properly validate signatures before displaying a configuration profile in the configuration installation utility, which allows remote attackers to spoof profiles via unspecified vectors...
Design/Logic Flaw
Apple iOS before 4.2 does not properly validate signatures before displaying a configuration profile in the configuration installation utility, which allows remote attackers to spoof profiles via unspecified vectors...
CVE-2010-3827
Apple iOS before 4.2 does not properly validate signatures before displaying a configuration profile in the configuration installation utility, which allows remote attackers to spoof profiles via unspecified vectors...
CVE-2010-3827
CVE-2010-3827 affects Apple iOS prior to 4.2. The issue is that the configuration-profile installation utility does not properly validate signatures before displaying a configuration profile, allowing remote attackers to spoof profiles via unspecified vectors. According to the sources, the vulner...
PT-2010-5108
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 4.2 Description The issue is related to the improper validation of signatures before displaying a configuration profile in the configuration installation utility. This allows remote attackers to spoof profiles via...