Apple TV and iOS mach_port_kobject kernel interface information disclosure vulnerability

Apple iOS is the latest operating system for Apple's iPhone and iPod touch devices. Apple TV is Apple's way of allowing photos, videos and music from PCs and iPods to be transmitted wirelessly to a TV in high definition. An information disclosure vulnerability exists in the Apple TV and iOS...

Apple TV and iOS Enterprise Signature App Security Bypass Vulnerability

Apple iOS is the latest operating system for Apple's iPhone and iPod touch devices. Apple TV is Apple's way of allowing photos, videos and music from PCs and iPods to be transmitted wirelessly to a TV in high definition. A security vulnerability exists in the Apple TV and iOS Enterprise Signature...

PT-2010-4446 · Apple · Ios

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 4.0.2 on the iPhone and iPod touch Apple iOS versions prior to 3.2.2 on the iPad Description: The issue is related to an integer overflow in IOSurface, which allows local users to gain privileges. This can be...

CVE-2009-2206

Multiple heap-based buffer overflows in the AudioCodecs library in the CoreAudio component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted 1 AAC or 2 MP3 file, a...

CVE-2009-2207

The MobileMail component in Apple iPhone OS 3.0 and 3.0.1, and iPhone OS 3.0 for iPod touch, lists deleted e-mail messages in Spotlight search results, which might allow local users to obtain sensitive information by reading these messages...

kdegraphics: KSVG NULL-pointer dereference in the SVGList interface implementation (ACE)

Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome Stable before 1.0.154.65, and possibly other products allows remote attackers to execute...

icu: XSS vulnerability due to improper invalid byte sequence handling

International Components for Unicode ICU 4.0, 3.6, and other 3.x versions, as used in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Fedora 9 and 10, and possibly other operating systems, does not properly handle invalid byte sequences...

PT-2009-3543 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: Apple iPhone OS versions 1.0 through 2.2.1 Apple iPhone OS for iPod touch versions 1.1 through 2.2.1 Description: The issue allows remote attackers to potentially force the iPhone to place a call without user approval. This occurs when the Ma...

PT-2009-4182 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: Apple Safari versions prior to 4.0 iPhone OS versions 1.0 through 2.2.1 iPhone OS for iPod touch versions 1.1 through 2.2.1 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via vecto...

PT-2008-5525 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: Safari in Apple iPhone OS versions 2.0 through 2.1 Safari in Apple iPhone OS for iPod touch versions 2.1 Description: The issue allows remote attackers to spoof a user interface via a crafted HTML document because Safari does not restrict an...

PT-2008-5524 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: Safari versions 1.0 through 2.1 in Apple iPhone OS Safari versions 1.1 through 2.1 in iPhone OS for iPod touch Description: The issue is related to the improper handling of HTML TABLE elements, which can be exploited by remote attackers to...

PT-2008-5522 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: Apple iPhone OS versions 2.0 through 2.1 Apple iPhone OS for iPod touch versions 2.0 through 2.1 Description: A race condition exists in the Passcode Lock feature, allowing physically proximate attackers to bypass the lock and launch arbitrar...