Code injection

Unspecified vulnerability in Safari on the Apple iPod touch aka iTouch and iPhone 1.1.1 allows user-assisted remote attackers to cause a denial of service application crash, and enable filesystem browsing by the local user, via a certain TIFF file...

CVE-2007-5450

Unspecified vulnerability in Safari on the Apple iPod touch aka iTouch and iPhone 1.1.1 allows user-assisted remote attackers to cause a denial of service application crash, and enable filesystem browsing by the local user, via a certain TIFF file...

CVE-2007-5450

CVE-2007-5450 affects Safari on Apple iPod touch and iPhone (v1.1.1). The vulnerability allows user-assisted remote attackers to crash the application and enable local filesystem browsing by processing a crafted TIFF file, exposing a denial-of-service risk and local data exposure. The PT-2007-648...

CVE-2007-5450

Unspecified vulnerability in Safari on the Apple iPod touch aka iTouch and iPhone 1.1.1 allows user-assisted remote attackers to cause a denial of service application crash, and enable filesystem browsing by the local user, via a certain TIFF file...

PT-2007-6486 · Apple · Safari

Name of the Vulnerable Software and Affected Versions: Safari on Apple iPod touch and iPhone version 1.1.1 Description: The issue allows user-assisted remote attackers to cause an application crash and enable filesystem browsing by the local user via a certain TIFF file. This can result in a deni...

Apple iTouch/iPhone 1.1.1 tif File Remote Jailbreak Exploit

No description provided by source. !-- The iPhone / iTouch tif exploit is now officially released! source: http://www.toc2rta.com/ So its offical we have released the tiff exploit code. You can navigate in safari to http://jailbreak.toc2rta.com ...

Apple iTouch/iPhone 1.1.1 tif File Remote Jailbreak Exploit

Exploit for hardware platform in category remote exploits =========================================================== Apple iTouch/iPhone 1.1.1 tif File Remote Jailbreak Exploit =========================================================== 0day.today 2018-03-12...

Apple iTouchiPhone 1.1.1 - .tif Remote Privilege Escalation Jailbreak

Apple iTouchiPhone 1.1.1 - .tif Remote Privilege Escalation Jailbreak milw0rm.com 2007-10-11...

Apple iTouch/iPhone 1.1.1 - '.tif' Remote Privilege Escalation 'Jailbreak'

milw0rm.com 2007-10-11...

Apple Safari / iPhone crossite access

Script can access source code of the page from different domain...

Apple iPhone Safari浏览器跨域URI泄露漏洞

BUGTRAQ ID: 25859 CVECAN ID: CVE-2007-3756 Apple iPhone是苹果最新发布的智能手机。 iPhone中内嵌的Safari浏览器在网页读取处理上存在漏洞，恶意网站可能利用此漏洞获取用户网络浏览相关的信息。 iPhone中内嵌的Safari浏览器允许网页读取当前在父窗口中所浏览的URL。如果用户受骗访问了恶意网页的话，攻击者就可以获得非相关页面的URL。 Apple iPhone 1.0.1 Apple iPhone 1 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Apple iPhone Safari浏览器非授权tel:初始化漏洞

BUGTRAQ ID: 25854 CVECAN ID: CVE-2007-3757 Apple iPhone是苹果最新发布的智能手机。 iPhone中内嵌的Safari浏览器在处理“tel:”链接时存在漏洞，可能导致无意地拨打电话。 iPhone中内嵌的Safari浏览器支持使用电话链接（tel:）拨打电话号码。在选择电话链接时，Safari会确认是否要拨打该号码。恶意的特制电话链接可能会导致在确认期间显示不同的号码，在确认期间退出Safari也可能导致非预期地进行确认。 Apple iPhone 1.0.1 Apple iPhone 1...

Apple iPhone Mail远程信息泄露漏洞

BUGTRAQ ID: 25856 CVECAN ID: CVE-2007-3754 Apple iPhone是苹果最新发布的智能手机。 iPhone内嵌的Mail邮件客户端在处理SSL连接时存在漏洞，远程攻击者可能利用此漏洞获取用户的敏感信息。 如果将iPhone内嵌的Mail邮件客户端配置为对入站和出站连接使用SSL的话，即使邮件服务器的身份已经改变或不可信任，Mail也不会警告用户。能够拦截连接的攻击者可以扮演称为用户的邮件服务器，获得用户的邮件凭据或其他敏感信息。 Apple iPhone 1.0.1 Apple iPhone 1...

Apple iPhone蓝牙任意代码执行漏洞

BUGTRAQ ID: 25855 CVECAN ID: CVE-2007-3753 Apple iPhone是苹果最新发布的智能手机。 iPhone的蓝牙服务器中存在输入验证错误，远程攻击者可能利用此漏洞控制系统。 如果向启用了蓝牙功能的iPhone手机发送了特制的服务发现协议（SDP）报文的话，就可以触发这个漏洞，导致应用程序意外终止或执行任意指令。 Apple iPhone 1.0.1 Apple iPhone 1 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.apple.com/itunes/download/iTunesSetup.e...

Apple iPhone Mail非授权tel:初始化漏洞

BUGTRAQ ID: 25862 CVECAN ID: CVE-2007-3755 Apple iPhone是苹果最新发布的智能手机。 iPhone中内嵌的Mail邮件客户端在处理邮件中内嵌的“tel:”链接时存在漏洞，可能导致无意地拨打电话。 iPhone中内嵌的Mail邮件客户端支持使用电话链接（tel:）拨打电话号码。如果用户受骗跟随了邮件消息中的电话链接的话，攻击者就可以导致iPhone未经用户确认便拨打电话。 Apple iPhone 1.0.1 Apple iPhone 1 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

JVN#79013771 Safari allows access from HTTP to HTTPS

Safari is a default web browser installed in Mac OS X and iPhone. Safari contains a vulnerability that allows a remote attacker to access web page contents protected by SSL/TLS from an HTTP page in the same domain. Impact A remote attacker could obtain or change the web page contents protected by...

Open redirect

Safari in Apple iPhone 1.1.1, when requested to disable Javascript, does not disable it until Safari is restarted, which might leave Safari open to attacks that the user does not expect...

CVE-2007-4671

Unspecified vulnerability in Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4 through 10.4.10, allows remote attackers to "alter or access" HTTPS content via an HTTP session with a crafted web page that causes Javascript to be applied to HTTPS pages...

CVE-2007-3759

Safari in Apple iPhone 1.1.1, when requested to disable Javascript, does not disable it until Safari is restarted, which might leave Safari open to attacks that the user does not expect...

CVE-2007-3761

Cross-site scripting XSS vulnerability in Safari in Apple iPhone 1.1.1 allows remote attackers to inject arbitrary web script or HTML by causing Javascript events to be applied to a frame in another domain...