iPhone MobileMail - LibTIFF Buffer Overflow (Metasploit)

$Id: mobilemaillibtiff.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

New Jailbreak Could Defy Patching on iPhones, iPads

Code that allows Apple customers to circumvent that company’s exclusive content protection features was released on Wednesday, with security researchers warning that the hack could be impossible for Apple to fix on devices that have already been manufactured. The Chronic Development Team, a group...

CVE-2010-1815

Use-after-free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors involving scrollbars...

CVE-2010-1813

WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors involving HTML object outlines...

CVE-2010-1809

The Accessibility component in Apple iOS before 4.1 on the iPhone and iPod touch does not perform the expected VoiceOver announcement associated with the location services icon, which has unspecified impact and attack vectors...

CVE-2010-1813

WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors involving HTML object outlines...

Double free

Double free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors related to the rendering of an inline element...

Information disclosure

The Accessibility component in Apple iOS before 4.1 on the iPhone and iPod touch does not perform the expected VoiceOver announcement associated with the location services icon, which has unspecified impact and attack vectors...

CVE-2010-1813

Removed by vendor...

CVE-2010-1809

The CVE-2010-1809 entry concerns Apple iOS prior to 4.1, specifically the Accessibility VoiceOver feature failing to announce the location services icon on iPhone/iPod touch. The underlying issue is tied to the Accessibility component and VoiceOver handling, with impact and attack vectors not exp...

CVE-2010-1817

CVE-2010-1817 describes a buffer overflow in ImageIO on Apple iOS prior to 4.1, exploitable via a crafted GIF file to allow remote code execution or cause a denial of service. Affected software: Apple iOS devices (iPhone/iPod touch) with ImageIO before 4.1. Root cause: overflow in GIF handling wi...

CVE-2010-1781

Double free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors related to the rendering of an inline element...

PT-2010-3448 · Webkit +2 · Webkitgtk +3

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 4.1 webkitgtk versions prior to 1.2.6 Description: The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in an application crash, via vectors involving scrollbars...

PT-2010-3444 · Apple · Ios

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 4.1 Description: The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted TIFF file. Recommendations: For version...

CVE-2010-1768

Unspecified vulnerability in Apple iTunes before 9.1 allows local users to gain console privileges via vectors related to log files, "insecure file operation," and syncing an iPhone, iPad, or iPod touch...

CVE-2010-1768

Unspecified vulnerability in Apple iTunes before 9.1 allows local users to gain console privileges via vectors related to log files, "insecure file operation," and syncing an iPhone, iPad, or iPod touch...

Apple Releases Updates for iPhone, iPod touch, and iPad

Apple has released iOS 4.0.2 for the iPhone and iPod touch and iOS 3.2.2 for the iPad to address vulnerabilities in the FreeType and IOSurface packages. Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code or gain system privileges. iPhone and iPod touch users are...

Foxit Plugs iPhone Jailbreak Vulnerability

The Foxit document reader has been updated to fix the same critical bug that currently leaves iPhones, iPads, and iPod touches wide open to malware attacks. Read the full article. The Register...

Apple заблокировала сайт Jailbreakme.com

Для компании Apple появление сайта Jailbreakme.com, позволяющего в два счета обходить защиту устройств на iOS, стало полной неожиданностью. В настоящее время она латает уязвимость в приложении PDF и обещает выпустить безопасное обновление в скором времени. После запуска Jailbreakme.com в Сети...

PT-2010-4446 · Apple · Ios

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 4.0.2 on the iPhone and iPod touch Apple iOS versions prior to 3.2.2 on the iPad Description: The issue is related to an integer overflow in IOSurface, which allows local users to gain privileges. This can be...