Memory corruption

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other...

CVE-2014-1355

The IOKit implementation in the kernel in Apple iOS before 7.1.2 and Apple TV before 6.1.2, and in IOReporting in Apple OS X before 10.9.4, allows local users to cause a denial of service NULL pointer dereference and reboot via crafted API arguments...

CVE-2014-1356

Heap-based buffer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application that sends IPC messages...

CVE-2014-1358

CVE-2014-1358 concerns a heap/overflow condition in the Apple launchd component. The issue is described as an integer overflow in launchd’s handling of IPC messages, which could allow a crafted application to execute arbitrary code with system privileges. Affected products include iOS before 7.1....

CVE-2014-1363

The CVE-2014-1363 issue involves WebKit as used in Apple software (iOS prior to 7.1.2; Safari prior to 6.1.5 and 7.x prior to 7.0.5; Apple TV prior to 6.1.2). The vulnerability affects the WebKit component and is triggered via a crafted web site, enabling remote attackers to execute arbitrary cod...

CVE-2014-1357

CVE-2014-1357: Heap overflow in launchd when handling log messages enables arbitrary code execution with system privileges on iOS <7.1.2, OS X <10.9.4, and Apple TV

CVE-2014-1325

Technical details about CVE-2014-1325 are not provided in the connected documents. Public specifics (affected products/versions/patches) are not disclosed here. Monitor for updates.

CVE-2014-1363

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other...

CVE-2014-1358

Integer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application...

CVE-2014-1364

CVE-2014-1364 affects WebKit as used in Apple iOS up to 7.1.2, Safari up to 6.1.5 and 7.x up to 7.0.5, and Apple TV up to 6.1.2. A crafted web site can cause remote code execution or memory corruption leading to a crash (DoS). Root cause: memory corruption in WebKit. Exploitation is not detailed ...

CVE-2014-1383

Apple TV prior to 6.1.2 contains CVE-2014-1383 in the iTunes Store purchase flow, allowing remote authenticated users to bypass the password requirement for transactions. The underlying issue is insufficient authorization handling in the purchase flow, enabling potentially unauthorized purchases....

CVE-2014-1383

Apple TV before 6.1.2 allows remote authenticated users to bypass an intended password requirement for iTunes Store purchase transactions via unspecified vectors...

CVE-2014-1367

CVE-2014-1367 affects WebKit as used in Apple iOS < 7.1.2, Safari < 6.1.5 and < 7.0.5 on 7.x, and Apple TV

CVE-2014-1356

CVE-2014-1356 is a heap buffer overflow in launchd’s handling of IPC messages that could allow arbitrary code execution with system privileges. Affected: iOS 7.1.2, OS X 10.9.4, and Apple TV 6.1.2. Root cause: improved bounds checking addressed the issue. Remediation: apply the corresponding Appl...

CVE-2014-1368

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other...

CVE-2014-1366

CVE-2014-1366 affects WebKit used in Apple iOS before 7.1.2, Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2. Description: remote attackers could execute arbitrary code or cause a denial of service via a crafted web site, via memory corruption and application crash. Root cause...

CVE-2014-1365

CVE-2014-1365 affects WebKit as used in Apple iOS before 7.1.2, Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2. The vulnerability allows a remote attacker to execute arbitrary code or cause a denial of service (memory corruption and application crash) through a crafted websit...

CVE-2014-1365

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other...

CVE-2014-1364

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other...

CVE-2014-1362

CVE-2014-1362 affects WebKit as used in Apple iOS prior to 7.1.2, Safari prior to 6.1.5 and 7.x prior to 7.0.5, and Apple TV prior to 6.1.2. The vulnerability enables remote attackers to cause memory corruption, leading to arbitrary code execution or a denial of service via a crafted web site. Th...