CVE-2014-1274

FaceTime in Apple iOS before 7.1 allows physically proximate attackers to obtain sensitive FaceTime contact information by using the lock screen for an invalid FaceTime call...

CVE-2013-6835

TelephonyUI Framework in Apple iOS 7 before 7.1, when Safari is used, does not require user confirmation for FaceTime audio calls, which allows remote attackers to obtain telephone number or e-mail address information via a facetime-audio: URL...

Design/Logic Flaw

FaceTime in Apple iOS before 7.1 allows physically proximate attackers to obtain sensitive FaceTime contact information by using the lock screen for an invalid FaceTime call...

Design/Logic Flaw

TelephonyUI Framework in Apple iOS 7 before 7.1, when Safari is used, does not require user confirmation for FaceTime audio calls, which allows remote attackers to obtain telephone number or e-mail address information via a facetime-audio: URL...

CVE-2014-1274

FaceTime in Apple iOS before 7.1 allows physically proximate attackers to obtain sensitive FaceTime contact information by using the lock screen for an invalid FaceTime call...

CVE-2013-6835

TelephonyUI Framework in Apple iOS 7 before 7.1, when Safari is used, does not require user confirmation for FaceTime audio calls, which allows remote attackers to obtain telephone number or e-mail address information via a facetime-audio: URL...

CVE-2014-1274

Mode C: The CVE-2014-1274 entry applies to Apple iOS before 7.1. The vulnerability allows a physically proximate attacker to access FaceTime contacts from the device lock screen by initiating an invalid FaceTime call. Impact is exposure of sensitive FaceTime contact information on a device left o...

CVE-2013-6835

CVE-2013-6835 involves Apple iOS prior to 7.1 where, when Safari is used, Facetime-Audio calls could be initiated via a facetime-audio URL without user confirmation, potentially exposing the user’s phone number or email address. The vulnerability arises from lack of user interaction prompting bef...

APPLE-SA-2014-03-10-1 iOS 7.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-03-10-1 iOS 7.1 iOS 7.1 is now available and addresses the following: Backup Available for: iPhone 4 and later, iPod touch 5th generation and later, iPad 2 and later Impact: A maliciously crafted backup can alter the filesystem...

Apple TV Touch Password Disclosure Vulnerability

Apple TV had an issue where it was logging a user's Apple ID and password via debug output in logs. - Affected Vendor: https://www.apple.com/ - Affected Software: Safari/Facetime on iOS - Affected Version: iOS 7 prior to 7.1 - Issue Type: Lack of user confirmation leading to a call being...

Apple Facetime Information Disclosure

Affected Vendor: https://www.apple.com/ - Affected Software: Safari/Facetime on iOS - Affected Version: iOS 7 prior to 7.1 - Issue Type: Lack of user confirmation leading to a call being established, revealing the user's identity phone number or email address - Release Date: March 10, 2014 -...

Apple iOS < 7.1 Multiple Vulnerabilities

Binary data 8155.prm...

Apple iOS 4.2.1 - facetime-audio: Security Bypass

Apple iOS 4.2.1 - facetime-audio: Security Bypass source: https://www.securityfocus.com/bid/66108/info Apple iOS is affected by a security-bypass vulnerability. Successfully exploiting this issue may allow an attacker to bypass certain security warnings. This may aid in further attacks. These...

Apple iOS < 7.1 Multiple Vulnerabilities

Binary data appleios71check.nbin...

Apple iOS 4.2.1 - 'facetime-audio://' Security Bypass

source: https://www.securityfocus.com/bid/66108/info Apple iOS is affected by a security-bypass vulnerability. Successfully exploiting this issue may allow an attacker to bypass certain security warnings. This may aid in further attacks. These issues affect Apple iOS versions prior to 7.1...

Apple iOS 7.0.4 update released to patch Apple Store purchase vulnerability

Apple has released the latest version of its mobile platform i.e. iOS 7.0.4 includes bug fixes, security patches with some new features. The update is available for iPhone, iPad and iPod touch, identified as "build 11B554a." Most importantly Apple has patched a critical security flaw that allowed...

Apple iOS 7.0.4 update released to patch Apple Store purchase vulnerability

Apple has released the latest version of its mobile platform i.e. iOS 7.0.4 includes bug fixes, security patches with some new features. The update is available for iPhone, iPad and iPod touch, identified as "build 11B554a." Most importantly Apple has patched a critical security flaw that allowed...

Another iPhone lockscreen bypass vulnerability found in iOS 7.02

Here we go again! Earlier this week, Apple released iOS 7.0.2 just to fix some Lockscreen bugs in iOS 7 and but a researcher has found a new Lockscreen bug in new iOS 7.0.2. This new Lockscreen bug is found by Dany Lisiansky, and he uploaded a proof of concept video on YouTube with the complete...

Another iPhone lockscreen bypass vulnerability found in iOS 7.02

Here we go again! Earlier this week, Apple released iOS 7.0.2 just to fix some Lockscreen bugs in iOS 7 and but a researcher has found a new Lockscreen bug in new iOS 7.0.2. This new Lockscreen bug is found by Dany Lisiansky, and he uploaded a proof of concept video on YouTube with the complete...

Apple Mac OS X 安全绕过漏洞

BUGTRAQ ID: 58517 CVECAN ID: CVE-2013-0970 Apple Mac OS X是苹果电脑操作系统软件。 Apple Mac OS X 10.8.3之前版本的Messages允许远程攻击者通过特制的FaceTime: URL，绕过FaceTime呼叫确认提示。 0 Apple Mac OS X 10.7.4 Apple Mac OS X 10.7.3 Apple Mac OS X 10.7.2 Apple Mac OS X 10.7.1 Apple Mac OS X Server 10.7.4 Apple Mac OS X Server 10.7.3...