CVE-2015-5885: Exposure of Sensitive Information to an Unauthorized Actor

The CFNetwork Cookies component in Apple iOS before 9 allows remote attackers to track users via vectors involving a cookie for a top-level domain...

PT-2015-6327

Name of the Vulnerable Software and Affected Versions iOS versions prior to 9 Description The issue concerns the document.cookie API implementation in the CFNetwork Cookies subsystem in WebKit, allowing remote attackers to bypass an intended single-cookie restriction. Recommendations For versions...

PT-2015-2109

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to the CFNetwork HTTPProtocol component mishandling HSTS state, allowing remote attackers to bypass the Safari private-browsing protection mechanism and track users via a crafted w...

CVE-2015-5860: Exposure of Sensitive Information to an Unauthorized Actor

The CFNetwork HTTPProtocol component in Apple iOS before 9 mishandles HSTS state, which allows remote attackers to bypass the Safari private-browsing protection mechanism and track users via a crafted web site...

CVE-2015-5824: Undefined Security Weakness

The NSURL implementation in the CFNetwork SSL component in Apple iOS before 9 does not properly verify X.509 certificates from SSL servers after a certificate change, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2015-2130

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to errors in the code of the CFNetwork FTPProtocol component. It allows remote FTP proxy servers to trigger TCP connection attempts to intranet hosts via crafted responses. This ca...

PT-2015-7067

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue allows physically proximate attackers to obtain sensitive information more easily. This is due to CFNetwork relying on the hardware UID for its cache encryption key. Recommendations For...

PT-2015-2095

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue arises from the CFNetwork Proxies component's improper handling of a Set-Cookie header within a response to an HTTP CONNECT request. This allows remote proxy servers to conduct cookie-injecti...

PT-2015-2082

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9 Description The issue is related to the NSURL implementation in the CFNetwork SSL component, which does not properly verify X.509 certificates from SSL servers after a certificate change. This allows attackers to...

CVE-2015-5841: Improper Neutralization of Special Elements in Output Used by a Downstream Component

The CFNetwork Proxies component in Apple iOS before 9 does not properly handle a Set-Cookie header within a response to an HTTP CONNECT request, which allows remote proxy servers to conduct cookie-injection attacks via a crafted response...

CVE-2015-5898: Exposure of Sensitive Information to an Unauthorized Actor

CFNetwork in Apple iOS before 9 relies on the hardware UID for its cache encryption key, which makes it easier for physically proximate attackers to obtain sensitive information by obtaining this UID...

CVE-2015-5912: Undefined Security Weakness

The CFNetwork FTPProtocol component in Apple iOS before 9 allows remote FTP proxy servers to trigger TCP connection attempts to intranet hosts via crafted responses...

Apple Addresses Dozens of Vulnerabilities, Embraces Two-Factor Authentication in iOS 9

Apple pushed out iOS 9 Wednesday, addressing a cornucopia of vulnerabilities, including bugs that could lead to arbitrary code execution, credential leakage, and interface spoofing among other issues. But conspicuously absent from the update however is a fix for the vulnerability in AirDrop that...

Apple iOS < 8.3 Multiple Vulnerabilities

Binary data 8803.prm...

APPLE-SA-2015-06-30-1 iOS 8.4

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2015-06-30-1 iOS 8.4 iOS 8.4 is now available and addresses the following: Application Store Available for: iPhone 4s and later, iPod touch 5th generation and later, iPad 2 and later Impact: A malicious universal provisioning profile app ma...

Memory corruption

The HTTPAuthentication implementation in CFNetwork in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted credentials in a URL...

CVE-2015-3684

Technical details about CVE-2015-3684 are not provided in the connected documents. The initial description notes memory corruption via crafted credentials in CFNetwork’s HTTPAuthentication, but no specific affected products, versions, exploitability, or fixes are given here. Monitor for updates.

CVE-2015-3684: Improper Restriction of Operations within the Bounds of a Memory Buffer

The HTTPAuthentication implementation in CFNetwork in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted credentials in a URL...

Mac OS X Multiple Vulnerabilities (Security Update 2015-005) (GHOST) (Logjam)

The remote host is running a version of Mac OS X 10.8.5 or 10.9.5 that is missing Security Update 2015-005. It is, therefore, affected multiple vulnerabilities in the following components : - Admin Framework - afpserver - apache - AppleFSCompression - AppleGraphicsControl -...

Mac OS X 10.10.x < 10.10.4 Multiple Vulnerabilities (GHOST) (Logjam)

The remote host is running a version of Mac OS X 10.10.x that is prior to 10.10.4. It is, therefore, affected multiple vulnerabilities in the following components : - Admin Framework - afpserver - apache - AppleFSCompression - AppleGraphicsControl - AppleThunderboltEDMService - ATS - Bluetooth -...