390 matches found
CVE-2014-3187
Google Chrome before 37.0.2062.60 and 38.x before 38.0.2125.59 on iOS does not properly restrict processing of 1 facetime:// and 2 facetime-audio:// URLs, which allows remote attackers to obtain video and audio data from a device via a crafted web site...
Code injection
Google Chrome before 37.0.2062.60 and 38.x before 38.0.2125.59 on iOS does not properly restrict processing of 1 facetime:// and 2 facetime-audio:// URLs, which allows remote attackers to obtain video and audio data from a device via a crafted web site...
CVE-2014-3187
Google Chrome before 37.0.2062.60 and 38.x before 38.0.2125.59 on iOS does not properly restrict processing of 1 facetime:// and 2 facetime-audio:// URLs, which allows remote attackers to obtain video and audio data from a device via a crafted web site...
CVE-2014-3187: Improper Neutralization of Input During Web Page Generation
Google Chrome before 37.0.2062.60 and 38.x before 38.0.2125.59 on iOS does not properly restrict processing of 1 facetime:// and 2 facetime-audio:// URLs, which allows remote attackers to obtain video and audio data from a device via a crafted web site...
iPhone vulnerability allows the phone to automatically dial expensive toll-vulnerability warning-the black bar safety net
Developer Andrei Neculaesei,found that although Safari will ask the user whether to make a call, but like Facebook Messenger and Google+, etc. most big name applications are not and the user to confirm whether to dial the telephone, but simply go ahead and make the call. Andrei Neculaesei create ...
[CVE-2013-6835] - iOS 7.0.6 Safari/Facetime-Audio Privacy issue
Affected Vendor: https://www.apple.com/ - Affected Software: Safari/Facetime on iOS - Affected Version: iOS 7 prior to 7.1 - Issue Type: Lack of user confirmation leading to a call being established, revealing the user's identity phone number or email address - Release Date: March 10, 2014 -...
CVE-2014-1274
FaceTime in Apple iOS before 7.1 allows physically proximate attackers to obtain sensitive FaceTime contact information by using the lock screen for an invalid FaceTime call...
CVE-2013-6835
TelephonyUI Framework in Apple iOS 7 before 7.1, when Safari is used, does not require user confirmation for FaceTime audio calls, which allows remote attackers to obtain telephone number or e-mail address information via a facetime-audio: URL...
Design/Logic Flaw
FaceTime in Apple iOS before 7.1 allows physically proximate attackers to obtain sensitive FaceTime contact information by using the lock screen for an invalid FaceTime call...
Design/Logic Flaw
TelephonyUI Framework in Apple iOS 7 before 7.1, when Safari is used, does not require user confirmation for FaceTime audio calls, which allows remote attackers to obtain telephone number or e-mail address information via a facetime-audio: URL...
CVE-2014-1274
FaceTime in Apple iOS before 7.1 allows physically proximate attackers to obtain sensitive FaceTime contact information by using the lock screen for an invalid FaceTime call...
CVE-2013-6835
TelephonyUI Framework in Apple iOS 7 before 7.1, when Safari is used, does not require user confirmation for FaceTime audio calls, which allows remote attackers to obtain telephone number or e-mail address information via a facetime-audio: URL...
CVE-2013-6835
CVE-2013-6835 involves Apple iOS prior to 7.1 where, when Safari is used, Facetime-Audio calls could be initiated via a facetime-audio URL without user confirmation, potentially exposing the user’s phone number or email address. The vulnerability arises from lack of user interaction prompting bef...
CVE-2014-1274
Mode C: The CVE-2014-1274 entry applies to Apple iOS before 7.1. The vulnerability allows a physically proximate attacker to access FaceTime contacts from the device lock screen by initiating an invalid FaceTime call. Impact is exposure of sensitive FaceTime contact information on a device left o...
CVE-2014-1274: Exposure of Sensitive Information to an Unauthorized Actor
FaceTime in Apple iOS before 7.1 allows physically proximate attackers to obtain sensitive FaceTime contact information by using the lock screen for an invalid FaceTime call...
CVE-2013-6835: Undefined Security Weakness
TelephonyUI Framework in Apple iOS 7 before 7.1, when Safari is used, does not require user confirmation for FaceTime audio calls, which allows remote attackers to obtain telephone number or e-mail address information via a facetime-audio: URL...
APPLE-SA-2014-03-10-1 iOS 7.1
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-03-10-1 iOS 7.1 iOS 7.1 is now available and addresses the following: Backup Available for: iPhone 4 and later, iPod touch 5th generation and later, iPad 2 and later Impact: A maliciously crafted backup can alter the filesystem...
Apple TV Touch Password Disclosure Vulnerability
Apple TV had an issue where it was logging a user's Apple ID and password via debug output in logs. - Affected Vendor: https://www.apple.com/ - Affected Software: Safari/Facetime on iOS - Affected Version: iOS 7 prior to 7.1 - Issue Type: Lack of user confirmation leading to a call being...
Apple Facetime Information Disclosure
Affected Vendor: https://www.apple.com/ - Affected Software: Safari/Facetime on iOS - Affected Version: iOS 7 prior to 7.1 - Issue Type: Lack of user confirmation leading to a call being established, revealing the user's identity phone number or email address - Release Date: March 10, 2014 -...
