CVE-2010-1179

Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a large integer in the numcolors attribute of a recolorinfo element in a VML file, possibly a related issue to CVE-2007-0024...

CVE-2010-1178

Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service application crash via a JavaScript loop that attempts to construct an infinitely long string...

CVE-2010-1180

Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long exception string in a throw statement, possibly a related issue to CVE-2009-1514...

CVE-2010-1177

Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors involving document.write calls with long crafted strings...

CVE-2010-1181

Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long string in a MARQUEE element...

CVE-2010-1179

CVE-2010-1179 : The description states that Safari on Apple iPhone OS 3.1.3 for iPod touch is vulnerable to a denial of service or potentially remote code execution via a large integer in the numcolors attribute of a recolorinfo element in a VML file. The affected platform is iPhone OS/Safari; th...

CVE-2010-1181

Safari on Apple iPhone OS 3.1.3 for iPod touch is affected by CVE-2010-1181. The vulnerability allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a MARQUEE element. Connected documents confirm the affected platform and ...

CVE-2010-1177

CVE-2010-1177 affects Safari on Apple iPhone OS 3.1.3 for iPod touch. The vulnerability arises in vectors involving document.write calls with long crafted strings, potentially causing denial of service (application crash) or possibly arbitrary code execution. The provided connected documents reit...

CVE-2010-1180

Technical details about CVE-2010-1180 are not provided in the connected documents. No public information on affected products, impact, or fixes is available here; monitor for updates.

CVE-2010-1179: Undefined Security Weakness

Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a large integer in the numcolors attribute of a recolorinfo element in a VML file, possibly a related issue to CVE-2007-0024...

CVE-2010-1176: Improper Control of Generation of Code

Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors related to an array of long strings, an array of IMG elements with crafted strings in their SRC attributes, a TBODY element with no...

CVE-2010-1177: Improper Control of Generation of Code

Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors involving document.write calls with long crafted strings...

CVE-2010-1180: Improper Control of Generation of Code

Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long exception string in a throw statement, possibly a related issue to CVE-2009-1514...

CVE-2010-1178: Undefined Security Weakness

Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service application crash via a JavaScript loop that attempts to construct an infinitely long string...

CVE-2010-1181: Improper Input Validation

Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long string in a MARQUEE element...

Safari On iPhone / iPod Touch Denial Of Service

Exploit Title: Remote DoS on Safari for iPhone & iPod Touch Date: 26/03/2010 Author: Nishant Das Patnaik For more of Nishant's research, please visit: http://nishantdaspatnaik.yolasite.com/research.php Tested on: iPod Touch 3G iPhone OS 3.1.3 Description: An attacker may direct the user to visit ...

Apple iOS Safari - Bad 'VML' Remote Denial of Service

Exploit Title: Bad "VML" Remote DoS on Safari for iPhone & iPod Touch Date: 26/03/2010 Author: Nishant Das Patnaik For more of Nishant's research, please visit: http://nishantdaspatnaik.yolasite.com/research.php Tested on: iPod Touch 3G iPhone OS 3.1.3 Description: An attacker may direct the user...

Stack overflow

Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Safari on iPhone OS and iPhone OS for iPod touch, and Google Chrome 4.0.249, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary co...

CVE-2010-1029

Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Safari on iPhone OS and iPhone OS for iPod touch, and Google Chrome 4.0.249, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary co...

Apple iPhone OS USB控制消息信息泄露漏洞

BUGTRAQ ID: 38040 CVE ID: CVE-2010-0038 iPhone OS是苹果iPhone智能手机和iPod touch播放器所使用的操作系统。 在处理某些USB控制消息时存在内存破坏漏洞，能够物理访问设备的用户可以绕过通行码验证访问用户数据。 Apple iPhone OS 1.1 - 3.1.2 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.apple.com...