Design/Logic Flaw

The Configuration Profiles component in Apple iOS before 7.1 and Apple TV before 6.1 does not properly evaluate the expiration date of a mobile configuration profile, which allows attackers to bypass intended access restrictions by using a profile after the date has passed...

Memory corruption

WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1290, CVE-2014-1291, CVE-2014-1293...

Memory corruption

WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1290, CVE-2014-1291, CVE-2014-1292...

Memory corruption

WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1290, CVE-2014-1291, CVE-2014-1292...

Design/Logic Flaw

CoreCapture in Apple iOS before 7.1 and Apple TV before 6.1 does not properly validate IOKit API calls, which allows attackers to cause a denial of service assertion failure and device crash via a crafted app...

Information disclosure

Apple TV before 6.1 does not properly restrict logging, which allows local users to obtain sensitive information by reading log data...

Design/Logic Flaw

The Profiles component in Apple iOS before 7.1 and Apple TV before 6.1 allows attackers to bypass intended configuration-profile visibility requirements via a long name...

CVE-2014-1275

CVE-2014-1275 is a vulnerability in Apple’s ImageIO component affecting iOS prior to 7.1 and Apple TV prior to 6.1. A buffer overflow in the handling of JPEG2000 images embedded in PDFs may allow a remote attacker to execute arbitrary code or cause an application crash (DoS). The issue is trigger...

CVE-2014-1267

CVE-2014-1267 affects Apple iOS <7.1 and Apple TV

CVE-2014-1293

WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1290, CVE-2014-1291, CVE-2014-1292...

CVE-2014-1280

Video Driver in Apple iOS before 7.1 and Apple TV before 6.1 allows remote attackers to cause a denial of service NULL pointer dereference and device hang via a crafted video file with MPEG-4 encoding...

CVE-2014-1273

dyld in Apple iOS before 7.1 and Apple TV before 6.1 allows attackers to bypass code-signing requirements by leveraging use of text-relocation instructions in a dynamic library...

CVE-2014-1279

Apple TV before 6.1 does not properly restrict logging, which allows local users to obtain sensitive information by reading log data...

CVE-2014-1292

WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1290, CVE-2014-1291, CVE-2014-1293...

CVE-2014-1271

CVE-2014-1271 concerns CoreCapture in Apple iOS prior to 7.1 and Apple TV prior to 6.1. The vulnerability arises because CoreCapture does not properly validate IOKit API calls, which can allow a crafted app to trigger a denial of service via assertion failure and device crash. The issue centers o...

CVE-2014-1280

CVE-2014-1280 affects Apple iOS before 7.1 and Apple TV before 6.1. The issue is in the Video Driver when processing MPEG-4 encoded video files, caused by a NULL pointer dereference that can lead to a denial of service (device hang). The vulnerability is documented across multiple sources and tie...

CVE-2014-1282

CVE-2014-1282 affects Apple iOS before 7.1 and Apple TV before 6.1, where a configuration profile with a long name could be loaded but not displayed in the Profiles UI, bypassing visibility requirements. The vulnerability is tied to the Profiles component and is documented in multiple sources (NV...

CVE-2014-1287

CVE-2014-1287 affects Apple devices via USB Host: in iOS versions before 7.1 and Apple TV before 6.1, sending crafted USB messages to a HID device can cause kernel memory corruption, potentially enabling arbitrary code execution or a reboot. The vulnerability is tied to the kernel panic path when...

CVE-2014-1289

Technical details for CVE-2014-1289 are not publicly available in the provided documents. Please monitor for updates.

CVE-2014-1294

WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1290, CVE-2014-1291, CVE-2014-1292...