4746 matches found
CVE-2012-3731
Mail in Apple iOS before 6 does not properly implement the Data Protection feature for e-mail attachments, which allows physically proximate attackers to bypass an intended passcode requirement via unspecified vectors...
CVE-2012-3734
Office Viewer in Apple iOS before 6 writes cleartext document data to a temporary file, which might allow local users to bypass a document's intended 1 Data Protection level or 2 encryption state by reading the temporary content...
Design/Logic Flaw
UIWebView in UIKit in Apple iOS before 6 does not properly use the Data Protection feature, which allows context-dependent attackers to obtain cleartext file content by leveraging direct access to a device's filesystem...
Design/Logic Flaw
Office Viewer in Apple iOS before 6 writes cleartext document data to a temporary file, which might allow local users to bypass a document's intended 1 Data Protection level or 2 encryption state by reading the temporary content...
Code injection
Mail in Apple iOS before 6 does not properly implement the Data Protection feature for e-mail attachments, which allows physically proximate attackers to bypass an intended passcode requirement via unspecified vectors...
CVE-2012-3734
CVE-2012-3734 affects Apple iOS Office Viewer prior to iOS 6. It enables information disclosure by writing a temporary file that contains data from viewed documents, potentially bypassing the device’s data protection or encryption state. The underlying issue is that unencrypted document data is w...
CVE-2012-3734
Office Viewer in Apple iOS before 6 writes cleartext document data to a temporary file, which might allow local users to bypass a document's intended 1 Data Protection level or 2 encryption state by reading the temporary content...
CVE-2012-3746
UIWebView in UIKit in Apple iOS before 6 does not properly use the Data Protection feature, which allows context-dependent attackers to obtain cleartext file content by leveraging direct access to a device's filesystem...
CVE-2012-3731
CVE-2012-3731 affects Apple iOS prior to 6, where Mail’s Data Protection for email attachments is not correctly implemented, allowing a physically proximate attacker to bypass the passcode requirement via unspecified vectors. The Apple advisory indicates the fix is in iOS 6 (update via iTunes/Sof...
CVE-2012-3746
Technical details about CVE-2012-3746 are not provided in the supplied documents. Monitor for updates.
Huawei Denies Stealing State Secrets or Supporting Cyber Espionage
Huawei, the massive Chinese technology company that has come under criticism for its close ties to China’s government, is defending itself, saying that it has never stolen national intelligence or intellectual property and does not support any groups that do so. The company has been a frequent...
Mandrake Linux Security Advisory : Zope (MDKSA-2000:086)
A potential security issue exists in versions of Zope up to and including 2.2.4. This issue involves incorrect protection of a data updating method on Image and File objects. Because the method was not correctly protected, it was possible for users with DTML editing privileges to update the raw...
Video: Locking Down iOS
Considering the rapid proliferation of smartpones and tablets and the vast wealth of personal and financial data many of us store on them, it is increasingly important that we find ways of securing our mobile devices. With that in mind, we decided there was no better way to kick-off a series of...
meetOne Insecure Transport / Information Disclosure
SUMMARY meetOne, currently in Germany in the Top 50 social apps of the iTunes Store, has multiple vulnerabilities and has been found guilty of stealing Apple iPhone address books and abusing the e-mail addresses there for spam. Apple Inc. is ignoring the data theft and it seems even supressing...
Dropbox Users Cry "Spam!" Company Investigates
Support forums frequented by users of the online storage service Dropbox were alive with reports of spam e-mail messages sent to supposedly secret, Dropbox-affiliated addresses. The reports have raised the dark spectre of a data leak at the cloud based personal storage firm. Hundreds of Dropbox...
Mac OS X Admin Group User List
Using the supplied credentials, Nessus was able to extract the member list of the 'Admin' and 'Wheel' groups. Members of these groups have administrative access to the remote system. TRUSTED...
Checkpoint Abra Multiple Vulnerabilities
Exploit for windows platform in category local exploits Check Point Abra Vulnerabilities Vendor: Check Point Software Technologies Ltd Product web page: http://rus.checkpoint.com/products/abra/index.html; http://www.checkpoint.com/products/go/ Platforms: Windows XP, Vista, 7 32 bit Summary: Check...
Watchdog Says Government Failing To Enforce HIPAA Privacy Protections
The Government Accountability Office GAO is warning that the U.S. government hasn’t lived up to promises to protect the privacy of Medicare patients who use the federal government’s Prescription Drug Benefit and not following through on promises to audit organizations that store patient health...
Travel Security Rundown
Summer travel season is well under way and considering the increasingly common reports detailing device seizures and data searches at international borders, you want to be very careful about the things you travel with. In a recently published SecureList article, Kaspersky Lab expert Dmitry...
