PT-2008-5522 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: Apple iPhone OS versions 2.0 through 2.1 Apple iPhone OS for iPod touch versions 2.0 through 2.1 Description: A race condition exists in the Passcode Lock feature, allowing physically proximate attackers to bypass the lock and launch arbitrar...

PT-2008-5526 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: Safari in Apple iPhone OS versions 1.0 through 2.1 Safari in Apple iPhone OS for iPod touch versions 1.1 through 2.1 Description: The issue allows remote attackers to make arbitrary phone calls via a crafted HTML document because Safari does...

Apple iPhone Configuration Web Utility directory traversal

ACcess outside web root is possible...

DDIVRT-2008-15 iPhone Configuration Web Utility 1.0 for Windows Directory Traversal

Title ----- DDIVRT-DDIVRT-2008-15 iPhone Configuration Web Utility 1.0 for Windows Directory Traversal Severity -------- High Date Discovered --------------- October 2, 2008 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: Corey LeBleu and r@b13$ Vulnerability...

CVE-2008-3623

Heap-based buffer overflow in CoreGraphics in Apple Safari before 3.2 on Windows, in iPhone OS 1.0 through 2.2.1, and in iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted image, related to...

Heap overflow

Heap-based buffer overflow in CoreGraphics in Apple Safari before 3.2 on Windows, in iPhone OS 1.0 through 2.2.1, and in iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted image, related to...

CVE-2008-3623

Heap-based buffer overflow in CoreGraphics in Apple Safari before 3.2 on Windows, in iPhone OS 1.0 through 2.2.1, and in iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted image, related to...

CVE-2008-3623

The CVE-2008-3623 entry describes a heap-based buffer overflow in CoreGraphics affecting Apple Safari before 3.2 on Windows and in iPhone OS 1.0–2.2.1 (and iPod touch 1.1–2.2.1). The vulnerability arises from improper handling of color spaces in image parsing, enabling remote attackers to execute...

多个产品库MP4文件远程拒绝服务漏洞

BUGTRAQ ID: 31957 CNCAN ID：CNCAN-2008102904 多个电话和音频产品使用的库在处理畸形MP4文件时存在问题，可导致应用程序崩溃。 这些产品包括： Apple iPhone Apple iPod touch VideoLan VLC 目前没有详细漏洞细节提供。其他产品也可能受此漏洞影响。 VideoLAN VLC media player 0.9.4 VideoLAN VLC media player 0.9.3 VideoLAN VLC media player 0.9.2 VideoLAN VLC media player 0.9.1 VideoL...

CVE-2008-4593

Apple iPhone 2.1 with firmware 5F136, when Require Passcode is enabled and Show SMS Preview is disabled, allows physically proximate attackers to obtain sensitive information by performing an Emergency Call tap and then reading SMS messages on the device screen, aka Apple bug number 6267416...

CVE-2008-4593

Apple iPhone 2.1 with firmware 5F136, when Require Passcode is enabled and Show SMS Preview is disabled, allows physically proximate attackers to obtain sensitive information by performing an Emergency Call tap and then reading SMS messages on the device screen, aka Apple bug number 6267416...

Code injection

Apple iPhone 2.1 with firmware 5F136, when Require Passcode is enabled and Show SMS Preview is disabled, allows physically proximate attackers to obtain sensitive information by performing an Emergency Call tap and then reading SMS messages on the device screen, aka Apple bug number 6267416...

CVE-2008-4593

Summary: CVE-2008-4593 (Apple iPhone OS 1.0–2.1 / iPod touch 1.1–2.1) allows physically proximate attackers to view sensitive SMS content by exploiting the Emergency Call screen when Passcode is required and SMS Preview is off. The linked documents (CVE-2008-4230, PRION/N) describe the same issue...

CVE-2008-4593

Apple iPhone 2.1 with firmware 5F136, when Require Passcode is enabled and Show SMS Preview is disabled, allows physically proximate attackers to obtain sensitive information by performing an Emergency Call tap and then reading SMS messages on the device screen, aka Apple bug number 6267416...

Integer overflow

Integer signedness error in 1 QuickLook in Apple Mac OS X 10.5.5 and 2 Office Viewer in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allows remote attackers to cause a denial of service application termination and execute arbitrary code via a crafted Microsoft Exce...

CVE-2008-4211

CVE-2008-4211 describes a signedness error in QuickLook on Mac OS X 10.5.5 and in Office Viewer for iPhone OS 1.0–2.1 that allows remote attackers to trigger an out-of-bounds memory access via a crafted Excel file (relating to “handling of columns”), potentially causing denial of service and arbi...

Apple iPhone Safari WebKit alert()函数远程拒绝服务漏洞

BUGTRAQ ID: 31061 CVECAN ID: CVE-2008-3950 iPhone是苹果发布的智能手机。 Apple Safari是iPhone手机中默认使用的WEB浏览器。Safari所使用的WebKit库中存在安全漏洞，如果对alert JavaScript方式注入了特殊字符串的话，越界内存读取可能触发访问破坏，导致Safari崩溃。 有漏洞的函数为webdrawInRect:withFont:ellipsis:alignment:measureOnly:...

CVE-2008-3950

Off-by-one error in the webdrawInRect:withFont:ellipsis:alignment:measureOnly function in WebKit in Safari in Apple iPhone 1.1.4 and 2.0 and iPod touch 1.1.4 and 2.0 allows remote attackers to cause a denial of service browser crash via a JavaScript alert call with an argument that lacks breakabl...

CVE-2008-3950

Off-by-one error in the webdrawInRect:withFont:ellipsis:alignment:measureOnly function in WebKit in Safari in Apple iPhone 1.1.4 and 2.0 and iPod touch 1.1.4 and 2.0 allows remote attackers to cause a denial of service browser crash via a JavaScript alert call with an argument that lacks breakabl...

CVE-2008-3950

Off-by-one error in the webdrawInRect:withFont:ellipsis:alignment:measureOnly function in WebKit in Safari in Apple iPhone 1.1.4 and 2.0 and iPod touch 1.1.4 and 2.0 allows remote attackers to cause a denial of service browser crash via a JavaScript alert call with an argument that lacks breakabl...