CVE-2012-3734

Office Viewer in Apple iOS before 6 writes cleartext document data to a temporary file, which might allow local users to bypass a document's intended 1 Data Protection level or 2 encryption state by reading the temporary content...

CVE-2012-3731

Mail in Apple iOS before 6 does not properly implement the Data Protection feature for e-mail attachments, which allows physically proximate attackers to bypass an intended passcode requirement via unspecified vectors...

Design/Logic Flaw

UIWebView in UIKit in Apple iOS before 6 does not properly use the Data Protection feature, which allows context-dependent attackers to obtain cleartext file content by leveraging direct access to a device's filesystem...

Design/Logic Flaw

Office Viewer in Apple iOS before 6 writes cleartext document data to a temporary file, which might allow local users to bypass a document's intended 1 Data Protection level or 2 encryption state by reading the temporary content...

Code injection

Mail in Apple iOS before 6 does not properly implement the Data Protection feature for e-mail attachments, which allows physically proximate attackers to bypass an intended passcode requirement via unspecified vectors...

CVE-2012-3734

Office Viewer in Apple iOS before 6 writes cleartext document data to a temporary file, which might allow local users to bypass a document's intended 1 Data Protection level or 2 encryption state by reading the temporary content...

CVE-2012-3731

CVE-2012-3731 affects Apple iOS prior to 6, where Mail’s Data Protection for email attachments is not correctly implemented, allowing a physically proximate attacker to bypass the passcode requirement via unspecified vectors. The Apple advisory indicates the fix is in iOS 6 (update via iTunes/Sof...

CVE-2012-3746

UIWebView in UIKit in Apple iOS before 6 does not properly use the Data Protection feature, which allows context-dependent attackers to obtain cleartext file content by leveraging direct access to a device's filesystem...

CVE-2012-3734

CVE-2012-3734 affects Apple iOS Office Viewer prior to iOS 6. It enables information disclosure by writing a temporary file that contains data from viewed documents, potentially bypassing the device’s data protection or encryption state. The underlying issue is that unencrypted document data is w...

CVE-2012-3746

Technical details about CVE-2012-3746 are not provided in the supplied documents. Monitor for updates.

PT-2012-4974

Name of the Vulnerable Software and Affected Versions Office Viewer in Apple iOS versions prior to 6 Description The issue allows local users to potentially bypass a document's intended Data Protection level or encryption state. This could be achieved by reading the cleartext document data writte...

CVE-2012-3746: Undefined Security Weakness

UIWebView in UIKit in Apple iOS before 6 does not properly use the Data Protection feature, which allows context-dependent attackers to obtain cleartext file content by leveraging direct access to a device's filesystem...

CVE-2012-3731: Undefined Security Weakness

Mail in Apple iOS before 6 does not properly implement the Data Protection feature for e-mail attachments, which allows physically proximate attackers to bypass an intended passcode requirement via unspecified vectors...

PT-2012-4971

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 6 Description The issue is related to the improper implementation of the Data Protection feature for e-mail attachments in Mail, allowing physically proximate attackers to bypass the intended passcode requirement...

PT-2012-4986

Name of the Vulnerable Software and Affected Versions iOS versions prior to 6 Description The issue concerns the UIWebView component in UIKit, which fails to properly utilize the Data Protection feature. This allows attackers to access cleartext file content by directly accessing the device's...

Huawei Denies Stealing State Secrets or Supporting Cyber Espionage

Huawei, the massive Chinese technology company that has come under criticism for its close ties to China’s government, is defending itself, saying that it has never stolen national intelligence or intellectual property and does not support any groups that do so. The company has been a frequent...

Mandrake Linux Security Advisory : Zope (MDKSA-2000:086)

A potential security issue exists in versions of Zope up to and including 2.2.4. This issue involves incorrect protection of a data updating method on Image and File objects. Because the method was not correctly protected, it was possible for users with DTML editing privileges to update the raw...

Video: Locking Down iOS

Considering the rapid proliferation of smartpones and tablets and the vast wealth of personal and financial data many of us store on them, it is increasingly important that we find ways of securing our mobile devices. With that in mind, we decided there was no better way to kick-off a series of...

meetOne Insecure Transport / Information Disclosure

SUMMARY meetOne, currently in Germany in the Top 50 social apps of the iTunes Store, has multiple vulnerabilities and has been found guilty of stealing Apple iPhone address books and abusing the e-mail addresses there for spam. Apple Inc. is ignoring the data theft and it seems even supressing...

Dropbox Users Cry "Spam!" Company Investigates

Support forums frequented by users of the online storage service Dropbox were alive with reports of spam e-mail messages sent to supposedly secret, Dropbox-affiliated addresses. The reports have raised the dark spectre of a data leak at the cloud based personal storage firm. Hundreds of Dropbox...