Apple iOS Cross-Domain COOKIE Handling Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability exists in Apple iOS that allows man-in-the-middle attackers to exploit a cross-domain cookie handling vulnerability to track the WEB activity of targeted users...

iPhone blue screen of 0day vulnerabilities analysis: playback video trigger kernel denial of service-vulnerability warning-the black bar safety net

Recent find someone in wechat group to share the video link when using the Apple device users click on this video link while a video is playing will cause the Apple device to restart. Found this problem after 360NirvanTeam core members@Proteas first time take samples for analysis, in a...

Apple iOS .tiff File Handling Memory Corruption Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS suffers from a security vulnerability in the handling of .tiff files that allows an attacker to construct malicious .tiff files and trick apps into parsing them, which can crash the app or execu...

Apple TV and iOS IOHIDFamily Event Queue Null Pointer Reference Vulnerability

Apple iOS is the latest operating system for Apple's iPhone and iPod touch devices. Apple TV is Apple's way of allowing photos, videos and music from PCs and iPods to be transmitted wirelessly to a TV in high definition. Apple TV and iOS contain an IOHIDFamily event queue handling null pointer...

iOS 7 - Kernel Mode Memory Corruption Vulnerability

When a specific value is supplied in USB Endpoint descriptor for a HID device the Apple device kernel panics and reboots Vulnerability Description ...................................... When a specific value is supplied in USB Endpoint descriptor for a HID device the Apple device kernel panics an...

CVE-2010-4551

IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash by omitting the Internet ID field in the person document, and then using an Apple device to 1 accept or 2 decline an invitation...

Null pointer dereference

IBM Lotus Notes Traveler before 8.5.1.2 allows remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash by omitting the Internet ID field in the person document, and then using an Apple device to 1 accept or 2 decline an invitation...

The iPad: As Insecure As The iPhone

Forbes reporter Andy Greenberg polled a group of security researchers about the security posture of Apple’s new iPad device and comes away with a simple conclusion: The iPad is just as insecure as the iPhone. Some quotes from the story: Aaron Portnoy, security researcher, Tipping Point: “It’s...

CVE-2009-1692

WebKit before r41741, as used in Apple iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Safari, and other software, allows remote attackers to cause a denial of service memory consumption or device reset via a web page containing an HTMLSelectElement object with a large...