CVE-2008-4233

Safari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not isolate the call-approval dialog from the process of launching new applications, which allows remote attackers to make arbitrary phone calls via a crafted HTML document...

CVE-2008-1586

ImageIO in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allow remote attackers to cause a denial of service memory consumption and device reset via a crafted TIFF image...

CVE-2008-1586

The CVE-2008-1586 issue affects ImageIO in Apple iPhone OS 1.0–2.1 and iPhone OS for iPod touch 1.1–2.1, where remote attackers can trigger denial of service via a crafted TIFF image. The core risk is memory consumption leading to a device reset. Connected sources also reference libtiff-related a...

CVE-2008-4230

The Passcode Lock feature in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 displays SMS messages when the emergency-call screen is visible, which allows physically proximate attackers to obtain sensitive information by reading these messages. NOTE: this might be a...

CVE-2008-4230

The CVE-2008-4230 family describes a vulnerability in Apple iPhone OS 1.0–2.1 and iPhone OS for iPod touch 1.1–2.1 where the Passcode Lock allows SMS content to be visible while the emergency-call screen is shown. The underlying issue is the display of SMS messages on the device screen when the e...

CVE-2008-4229

CVE-2008-4229 describes a race condition in the Passcode Lock feature affecting Apple iPhone OS 2.0–2.1 and iPhone OS for iPod touch 2.0–2.1, enabling physically proximate attackers to bypass the lock and launch arbitrary applications by restoring the device from a backup. The issue is tied to th...

CVE-2008-4233

The CVE-2008-4233 entry affects Safari in Apple iPhone OS 1.0–2.1 and iPhone OS for iPod touch 1.1–2.1, where the call-approval dialog is not isolated from the process launching new applications. This allows a crafted HTML document to cause remote phones calls. Exploitation details are not provid...

CVE-2008-4228

The Passcode Lock feature in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allows physically proximate attackers to leverage the emergency-call ability of locked devices to make a phone call to an arbitrary number...

PT-2008-5526 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: Safari in Apple iPhone OS versions 1.0 through 2.1 Safari in Apple iPhone OS for iPod touch versions 1.1 through 2.1 Description: The issue allows remote attackers to make arbitrary phone calls via a crafted HTML document because Safari does...

PT-2008-5521 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: Apple iPhone OS versions 1.0 through 2.1 Apple iPhone OS for iPod touch versions 1.1 through 2.1 Description: The issue allows physically proximate attackers to make a phone call to an arbitrary number by leveraging the emergency-call ability...

PT-2008-5523 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: Apple iPhone OS versions 1.0 through 2.1 iPhone OS for iPod touch versions 1.1 through 2.1 Description: The Passcode Lock feature displays SMS messages when the emergency-call screen is visible. This allows physically proximate attackers to...

PT-2008-5520 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: Apple iPhone OS versions 1.0 through 2.1 Apple iPhone OS for iPod touch versions 1.1 through 2.1 Description: The issue concerns a change in the encryption level of PPTP VPN connections, which is lowered to a level that makes it easier for...

PT-2008-5525 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: Safari in Apple iPhone OS versions 2.0 through 2.1 Safari in Apple iPhone OS for iPod touch versions 2.1 Description: The issue allows remote attackers to spoof a user interface via a crafted HTML document because Safari does not restrict an...

PT-2008-5524 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: Safari versions 1.0 through 2.1 in Apple iPhone OS Safari versions 1.1 through 2.1 in iPhone OS for iPod touch Description: The issue is related to the improper handling of HTML TABLE elements, which can be exploited by remote attackers to...

PT-2008-5522 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: Apple iPhone OS versions 2.0 through 2.1 Apple iPhone OS for iPod touch versions 2.0 through 2.1 Description: A race condition exists in the Passcode Lock feature, allowing physically proximate attackers to bypass the lock and launch arbitrar...

DDIVRT-2008-15 iPhone Configuration Web Utility 1.0 for Windows Directory Traversal

Title ----- DDIVRT-DDIVRT-2008-15 iPhone Configuration Web Utility 1.0 for Windows Directory Traversal Severity -------- High Date Discovered --------------- October 2, 2008 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: Corey LeBleu and r@b13$ Vulnerability...

Apple iPhone Configuration Web Utility directory traversal

ACcess outside web root is possible...

CVE-2008-3623

Heap-based buffer overflow in CoreGraphics in Apple Safari before 3.2 on Windows, in iPhone OS 1.0 through 2.2.1, and in iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted image, related to...

Heap overflow

Heap-based buffer overflow in CoreGraphics in Apple Safari before 3.2 on Windows, in iPhone OS 1.0 through 2.2.1, and in iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted image, related to...

CVE-2008-3623

Heap-based buffer overflow in CoreGraphics in Apple Safari before 3.2 on Windows, in iPhone OS 1.0 through 2.2.1, and in iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted image, related to...