CVE-2014-1272

CrashHouseKeeping in Crash Reporting in Apple iOS before 7.1 and Apple TV before 6.1 allows local users to change arbitrary file permissions by leveraging a symlink...

CVE-2014-1279

Apple TV before 6.1 does not properly restrict logging, which allows local users to obtain sensitive information by reading log data...

CVE-2014-1290

WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1291, CVE-2014-1292, CVE-2014-1293...

CVE-2014-1273

dyld in Apple iOS before 7.1 and Apple TV before 6.1 allows attackers to bypass code-signing requirements by leveraging use of text-relocation instructions in a dynamic library...

CVE-2014-1290

CVE-2014-1290 affects WebKit as used in Apple iOS before 7.1 and Apple TV before 6.1. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted website. It is described as a distinct issue from CVE-2014...

CVE-2014-1273

CVE-2014-1273 affects Apple iOS before 7.1 and Apple TV before 6.1. The issue in dyld arises from loading text relocation instructions in dynamic libraries, allowing bypass of code-signing requirements. Apple’s 7.1/6.1 updates address this by ignoring text relocation instructions during dynamic l...

CVE-2014-1287

CVE-2014-1287 affects Apple devices via USB Host: in iOS versions before 7.1 and Apple TV before 6.1, sending crafted USB messages to a HID device can cause kernel memory corruption, potentially enabling arbitrary code execution or a reboot. The vulnerability is tied to the kernel panic path when...

CVE-2014-1267

The Configuration Profiles component in Apple iOS before 7.1 and Apple TV before 6.1 does not properly evaluate the expiration date of a mobile configuration profile, which allows attackers to bypass intended access restrictions by using a profile after the date has passed...

CVE-2014-1272

CVE-2014-1272 affects Apple iOS before 7.1 and Apple TV before 6.1, in CrashHouseKeeping (Crash Reporting). The issue allows a local user to change arbitrary file permissions by leveraging a symlink, due to following symbolic links when altering permissions. Impact is local privilege-related with...

CVE-2014-1275

CVE-2014-1275 is a vulnerability in Apple’s ImageIO component affecting iOS prior to 7.1 and Apple TV prior to 6.1. A buffer overflow in the handling of JPEG2000 images embedded in PDFs may allow a remote attacker to execute arbitrary code or cause an application crash (DoS). The issue is trigger...

CVE-2014-1278

The CVE-2014-1278 entry concerns an out-of-bounds memory access in the ARM kernel ptmx_get_ioctl function on Apple iOS (pre-7.1) and Apple TV (pre-6.1). This local-privilege/escalation vulnerability could allow a local user to gain privileges or cause a denial of service via a crafted call. Affec...

CVE-2014-1282

The Profiles component in Apple iOS before 7.1 and Apple TV before 6.1 allows attackers to bypass intended configuration-profile visibility requirements via a long name...

CVE-2014-1292

WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1290, CVE-2014-1291, CVE-2014-1293...

CVE-2014-1280

Video Driver in Apple iOS before 7.1 and Apple TV before 6.1 allows remote attackers to cause a denial of service NULL pointer dereference and device hang via a crafted video file with MPEG-4 encoding...

CVE-2014-1293

WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1290, CVE-2014-1291, CVE-2014-1292...

CVE-2014-1294

WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1290, CVE-2014-1291, CVE-2014-1292...

CVE-2014-1280

CVE-2014-1280 affects Apple iOS before 7.1 and Apple TV before 6.1. The issue is in the Video Driver when processing MPEG-4 encoded video files, caused by a NULL pointer dereference that can lead to a denial of service (device hang). The vulnerability is documented across multiple sources and tie...

CVE-2014-1271

CVE-2014-1271 concerns CoreCapture in Apple iOS prior to 7.1 and Apple TV prior to 6.1. The vulnerability arises because CoreCapture does not properly validate IOKit API calls, which can allow a crafted app to trigger a denial of service via assertion failure and device crash. The issue centers o...

CVE-2014-1282

CVE-2014-1282 affects Apple iOS before 7.1 and Apple TV before 6.1, where a configuration profile with a long name could be loaded but not displayed in the Profiles UI, bypassing visibility requirements. The vulnerability is tied to the Profiles component and is documented in multiple sources (NV...

CVE-2014-1294

CVE-2014-1294 affects WebKit as used in Apple iOS prior to 7.1 and Apple TV prior to 6.1. A crafted website can trigger remote code execution or a denial of service through memory corruption, causing an application crash. This entry is related to other CVEs in the same family (e.g., CVE-2014-1289...