CVE-2009-1690

CVE-2009-1690 is a use-after-free in WebKit affecting Safari (pre-4.0) and related WebKit-based products (iPhone OS 1.0–2.2.1, iPod touch 1.1–2.2.1, Google Chrome 1.0.154.53). The issue arises when a crafted HTML tag property causes child elements to be freed and later accessed during an HTML err...

CVE-2009-1691

CVE-2009-1691 is a cross-site scripting (XSS) vulnerability affecting WebKit in Apple Safari prior to 4.0, and the iPhone OS family up to 2.2.1. The root cause is insufficient access control for standard JavaScript prototypes across domains, enabling remote attackers to inject arbitrary web scrip...

CVE-2009-1694

Removed by vendor...

CVE-2009-1688

Removed by vendor...

CVE-2009-1681

Removed by vendor...

CVE-2009-1693

Removed by vendor...

CVE-2009-1691

Removed by vendor...

CVE-2009-1690

Removed by vendor...

CVE-2009-1689

Removed by vendor...

CVE-2009-1687

Removed by vendor...

CVE-2009-1685

Removed by vendor...

CVE-2009-1684

Removed by vendor...

CVE-2009-1684

WebKit-based XSS in Safari (pre-4.0) and iPhone OS up to 2.2.1 can be triggered via an event handler to run arbitrary scripts in the next loaded document. Root cause: improper handling of event-driven script execution in WebKit. Impact: remote code execution via crafted HTML documents. Remediatio...

CVE-2009-1694

CVE-2009-1694 affects WebKit in Apple Safari

CVE-2009-1699

The XSL stylesheet implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle XML external entities, which allows remote attackers to read arbitrary files via a crafted DTD, as demonstrated by a...

PT-2009-4182 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: Apple Safari versions prior to 4.0 iPhone OS versions 1.0 through 2.2.1 iPhone OS for iPod touch versions 1.1 through 2.2.1 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via vecto...

CVE-2009-1698

WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not initialize a pointer during handling of a Cascading Style Sheets CSS attr function call with a large numerical argument, which allows remote attackers to execute arbitrary code ...

CVE-2009-1690

Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome 1.0.154.53, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service memory...

CVE-2009-1687

The JavaScript garbage collector in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle allocation failures, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption a...

iPhone 3G S still not enterprise-ready

From Computerworld Matt Hamblen The new iPhone 3G S boasts remote data wipe, hardware-based encryption and tethering of the device to a laptop that would seem to please business users interested in protecting data and enhancing productivity. But no, those steps are not good enough for widespread...