PT-2014-4073

WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-1290, CVE-2014-1291, CVE-2014-1292, CVE-2014-1293...

PT-2014-4057

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1 Apple TV versions prior to 6.1 Description The issue is related to the CoreCapture component, which does not properly validate IOKit API calls. This allows attackers to cause a denial of service, resulting in an...

PT-2014-4058

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1 Apple TV versions prior to 6.1 Description The issue allows local users to change arbitrary file permissions by leveraging a symlink in CrashHouseKeeping, which is part of Crash Reporting. Recommendations For...

PT-2014-4061

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1 Apple TV versions prior to 6.1 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via crafted JPEG2000 data in a PDF document. This is due to a buffer overflow i...

CVE-2014-1272: Improper Link Resolution Before File Access

CrashHouseKeeping in Crash Reporting in Apple iOS before 7.1 and Apple TV before 6.1 allows local users to change arbitrary file permissions by leveraging a symlink...

CVE-2014-1289: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-1290, CVE-2014-1291, CVE-2014-1292, CVE-2014-1293...

CVE-2014-1287: Improper Restriction of Operations within the Bounds of a Memory Buffer

USB Host in Apple iOS before 7.1 and Apple TV before 6.1 allows physically proximate attackers to execute arbitrary code or cause a denial of service memory corruption via crafted USB messages...

CVE-2014-1294: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1290, CVE-2014-1291, CVE-2014-1292...

CVE-2014-1292: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1290, CVE-2014-1291, CVE-2014-1293...

CVE-2014-1290: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1291, CVE-2014-1292, CVE-2014-1293...

CVE-2014-1293: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1290, CVE-2014-1291, CVE-2014-1292...

CVE-2014-1291: Improper Restriction of Operations within the Bounds of a Memory Buffer

WebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-1289, CVE-2014-1290, CVE-2014-1292, CVE-2014-1293...

PT-2014-4066

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1 Apple TV versions prior to 6.1 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and device hang, via a crafted video file with MPEG-4 encoding...

CVE-2014-1271: Improper Input Validation

CoreCapture in Apple iOS before 7.1 and Apple TV before 6.1 does not properly validate IOKit API calls, which allows attackers to cause a denial of service assertion failure and device crash via a crafted app...

PT-2014-4064

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1 Apple TV versions prior to 6.1 Description The issue allows local users to gain privileges or cause a denial of service, resulting in out-of-bounds memory access and device crash, via a crafted call to the ptmx...

CVE-2014-1280: Undefined Security Weakness

Video Driver in Apple iOS before 7.1 and Apple TV before 6.1 allows remote attackers to cause a denial of service NULL pointer dereference and device hang via a crafted video file with MPEG-4 encoding...

PT-2014-4059

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1 Apple TV versions prior to 6.1 Description The issue allows attackers to bypass code-signing requirements by leveraging the use of text-relocation instructions in a dynamic library. Recommendations For Apple iOS...

CVE-2014-1282: Undefined Security Weakness

The Profiles component in Apple iOS before 7.1 and Apple TV before 6.1 allows attackers to bypass intended configuration-profile visibility requirements via a long name...

CVE-2014-1267: Improper Input Validation

The Configuration Profiles component in Apple iOS before 7.1 and Apple TV before 6.1 does not properly evaluate the expiration date of a mobile configuration profile, which allows attackers to bypass intended access restrictions by using a profile after the date has passed...

CVE-2014-1279: Undefined Security Weakness

Apple TV before 6.1 does not properly restrict logging, which allows local users to obtain sensitive information by reading log data...