253 matches found
The vulnerability of Safari browser and iOS operating system allows a hacker to execute arbitrary code or trigger a service failure.
The vulnerability of the WebKit component in the Safari browser and the iOS operating system is caused by a buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure through a specially crafted web page...
UBUNTU-CVE-2015-3751
WebKit in Apple Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, as used in iOS before 8.4.1 and other products, allows remote attackers to bypass a Content Security Policy protection mechanism by using a video control in conjunction with an IMG element within an OBJECT element...
Apple iOS Memory Information Disclosure Vulnerability (CNVD-2015-04250)
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory management vulnerability exists in Apple iOS's handling of HFS parameters, allowing an attacker to run a malicious application to obtain memory layout information...
Apple iOS Safari Cross-Site Request Forgery Vulnerability
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A cross-site request forgery vulnerability exists in Safari, which is used by Apple iOS, allowing remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious...
Apple iOS Malicious Email Forgery Vulnerability
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability in the handling of HTML emails in Apple iOS allows an attacker to send a special email where the message can be viewed with an arbitrary WEB page to replace the message content...
Apple iOS text file handling memory corruption vulnerability (CNVD-2015-04310)
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in the handling of text files in Apple iOS, which allows attackers to construct malicious text files and trick users into parsing them, which can execute arbitrary...
Apple iOS Common Profile Application Installation Logic Vulnerability
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. There is a problem with the Apple iOS universal profile application installation logic, which allows an attacker to cause denial of service attacks ID collisions and launch interruptions by specially...
Apple iOS Security Bypass Vulnerability (CNVD-2015-02322)
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability exists in Apple iOS that could result in multiple failed password entries without deleting the contents of the device. A local attacker could exploit the vulnerability to bypass...
Apple TV and iOS App Installation Handling Security Bypass Vulnerability
Apple iOS is the latest operating system for Apple's iPhone and iPod touch devices. Apple TV is Apple's way of allowing photos, videos and music from PCs and iPods to be transmitted wirelessly to a TV in high definition. A security vulnerability exists in the Apple TV and iOS application...
UBUNTU-CVE-2013-0949
WebKit, as used in Apple iOS before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-01-28-1...
Hackers release Windows Phone 8 Malware - to be showcased at MalCon
It's be Just hours Windows Phone 8 has been released - and hackers have already dished out a malware prototype for the platform. Windows Phone 8 is the second generation of the Windows Phone mobile operating system. Windows Phone 8 Microsoft's latest in mobile OS technology - comes in as a direct...
UBUNTU-CVE-2011-0160
WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle redirects in conjunction with HTTP Basic Authentication, which might allow remote web servers to capture credentials by logging the Authorization HTTP header...
PT-2010-3445 · Webkit +2 · Webkitgtk +3
Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 4.1 webkitgtk versions prior to 1.2.6 Description: The issue is related to a use-after-free vulnerability in WebKit, which allows remote attackers to execute arbitrary code or cause a denial of service, resulting i...