CVE-2014-1275

Buffer overflow in ImageIO in Apple iOS before 7.1 and Apple TV before 6.1 allows remote attackers to execute arbitrary code or cause a denial of service application crash via crafted JPEG2000 data in a PDF document...

CVE-2014-1294

CVE-2014-1294 affects WebKit as used in Apple iOS prior to 7.1 and Apple TV prior to 6.1. A crafted website can trigger remote code execution or a denial of service through memory corruption, causing an application crash. This entry is related to other CVEs in the same family (e.g., CVE-2014-1289...

CVE-2014-1287

USB Host in Apple iOS before 7.1 and Apple TV before 6.1 allows physically proximate attackers to execute arbitrary code or cause a denial of service memory corruption via crafted USB messages...

CVE-2014-1273

CVE-2014-1273 affects Apple iOS before 7.1 and Apple TV before 6.1. The issue in dyld arises from loading text relocation instructions in dynamic libraries, allowing bypass of code-signing requirements. Apple’s 7.1/6.1 updates address this by ignoring text relocation instructions during dynamic l...

CVE-2014-1292

Technical details for CVE-2014-1292 are not publicly provided in the connected documents. The materials reference the WebKit vulnerability affecting Apple iOS before 7.1 and Apple TV before 6.1, but do not include explicit affected versions, impact specifics, or fixes.

CVE-2014-1278

The CVE-2014-1278 entry concerns an out-of-bounds memory access in the ARM kernel ptmx_get_ioctl function on Apple iOS (pre-7.1) and Apple TV (pre-6.1). This local-privilege/escalation vulnerability could allow a local user to gain privileges or cause a denial of service via a crafted call. Affec...

CVE-2014-1293

CVE-2014-1293 affects WebKit as used in Apple iOS before 7.1 and Apple TV before 6.1, where a crafted web site could allow a remote attacker to execute arbitrary code or cause a memory corruption/denial-of-service via memory corruption and application crash. The connected SUSE/Security entry conf...

CVE-2014-1290

WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1291, CVE-2014-1292, CVE-2014-1293...

CVE-2014-1282

The Profiles component in Apple iOS before 7.1 and Apple TV before 6.1 allows attackers to bypass intended configuration-profile visibility requirements via a long name...

CVE-2014-1272

CVE-2014-1272 affects Apple iOS before 7.1 and Apple TV before 6.1, in CrashHouseKeeping (Crash Reporting). The issue allows a local user to change arbitrary file permissions by leveraging a symlink, due to following symbolic links when altering permissions. Impact is local privilege-related with...

CVE-2014-1271

CoreCapture in Apple iOS before 7.1 and Apple TV before 6.1 does not properly validate IOKit API calls, which allows attackers to cause a denial of service assertion failure and device crash via a crafted app...

CVE-2014-1267

The Configuration Profiles component in Apple iOS before 7.1 and Apple TV before 6.1 does not properly evaluate the expiration date of a mobile configuration profile, which allows attackers to bypass intended access restrictions by using a profile after the date has passed...

CVE-2014-1290

CVE-2014-1290 affects WebKit as used in Apple iOS before 7.1 and Apple TV before 6.1. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted website. It is described as a distinct issue from CVE-2014...

CVE-2014-1272

CrashHouseKeeping in Crash Reporting in Apple iOS before 7.1 and Apple TV before 6.1 allows local users to change arbitrary file permissions by leveraging a symlink...

CVE-2014-1279

Apple TV prior to version 6.1 is affected by CVE-2014-1279 due to improper restriction of logging, allowing local users to read log data and obtain sensitive information. The issue targets the logging subsystem and is considered a local-attack impact (no remote vector described). Apple’s advisory...

PT-2014-4053

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1 Apple TV versions prior to 6.1 Description The issue concerns the Configuration Profiles component, which fails to properly evaluate the expiration date of a mobile configuration profile. This allows attackers t...

CVE-2014-1273: Improper Input Validation

dyld in Apple iOS before 7.1 and Apple TV before 6.1 allows attackers to bypass code-signing requirements by leveraging use of text-relocation instructions in a dynamic library...

PT-2014-4065

Name of the Vulnerable Software and Affected Versions Apple TV versions prior to 6.1 Description The issue allows local users to obtain sensitive information by reading log data due to improper restriction of logging. Recommendations For Apple TV versions prior to 6.1, update to version 6.1 or...

PT-2014-4075

WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1290, CVE-2014-1292, CVE-2014-1293...

PT-2014-4072

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1 Apple TV versions prior to 6.1 Description The issue allows physically proximate attackers to execute arbitrary code or cause a denial of service due to memory corruption via crafted USB messages. Recommendation...