Multiple Vendor DNS Protocol Insufficient Transaction ID Randomization DNS Spoofing Vulnerability

Description Multiple vendors' implementations of the DNS protocol are prone to a DNS-spoofing vulnerability because the software fails to securely implement random values when performing DNS queries. Successfully exploiting this issue allows remote attackers to spoof DNS replies, allowing them to...

PT-2008-1163 · Apple +2 · Iphone +4

Name of the Vulnerable Software and Affected Versions: Apple iPod touch versions 1.1 through 2.0.2 Apple iPhone versions 1.0 through 2.0.2 Qt affected versions not specified Description: The issue is related to a use-after-free vulnerability in WebKit and an error in resource management in the Qt...

Apple Safari (webkit) Remote Denial of Service Exploit (iphone/osx/win)

No description provided by source. !-- Even though Georgi Guninski retired from the scene, his old code is still finding new bugs. iphone fw:1.1.4 : locks up safari win32 : crashes safari osx : crashes looped the x's on milw0rm to find the bug...

Apple Safari (webkit) (iPhoneOSXWindows) - Remote Denial of Service

Apple Safari webkit iPhoneOSXWindows - Remote Denial of Service Copyright Georgi Guninski Cannot be used in vulnerability databases Especially securityfocus/mitre/cve/cert var s=String.fromCharCode257; var ki=""; var me=""; fori=0;i milw0rm.com 2008-03-17...

Apple Safari (webkit) Remote Denial of Service Exploit (iphone/osx/win)

Exploit for multiple platform in category dos / poc ======================================================================= Apple Safari webkit Remote Denial of Service Exploit iphone/osx/win ======================================================================= Copyright Georgi Guninski Cannot ...

safariphone-dos.txt

Copyright Georgi Guninski Cannot be used in vulnerability databases Especially securityfocus/mitre/cve/cert var s=String.fromCharCode257; var ki=""; var me=""; fori=0;i...

Apple Safari (webkit) (iPhone/OSX/Windows) - Remote Denial of Service

Copyright Georgi Guninski Cannot be used in vulnerability databases Especially securityfocus/mitre/cve/cert var s=String.fromCharCode257; var ki=""; var me=""; fori=0;i milw0rm.com 2008-03-17...

Apple iPhone和iPod Touch Foundation参数内存破坏漏洞

BUGTRAQ ID: 27296 CVECAN ID: CVE-2008-0035 iPod touch（也被称为iTouch）是苹果公司发布的MP4播放器，iPhone是其发布的智能手机。 iPhone和iPod Touch所内嵌的Safari浏览器处理畸形URL时存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 Safari浏览器没有正确地处理URL中的Foundation参数，如果用户受骗跟随了恶意链接的话，就可能触发内存破坏，导致浏览器崩溃或执行任意指令。 Apple iPhone 1.0 - 1.1.2 Apple iTouch 1.1 - 1.1.2 Apple -----...

CVE-2008-0729

Mobile Safari on Apple iPhone 1.1.2 and 1.1.3 allows remote attackers to cause a denial of service memory exhaustion and device crash via certain JavaScript code that constructs a long string and an array containing long string elements, possibly a related issue to CVE-2006-3677. NOTE: some of...

Design/Logic Flaw

Mobile Safari on Apple iPhone 1.1.2 and 1.1.3 allows remote attackers to cause a denial of service memory exhaustion and device crash via certain JavaScript code that constructs a long string and an array containing long string elements, possibly a related issue to CVE-2006-3677. NOTE: some of...

CVE-2008-0729

Technical details for CVE-2008-0729 are not publicly available in the provided documents. Connected records discuss related Mozilla/SeaMonkey CVEs (e.g., 2006-3677) but do not describe this CVE’s affected products, impact, or fix. Monitor for updates.

PT-2008-2347 · Apple · Apple Safari

Name of the Vulnerable Software and Affected Versions: Mobile Safari on Apple iPhone versions 1.1.2 through 1.1.3 Description: The issue allows remote attackers to cause a denial of service, resulting in memory exhaustion and device crash, via certain JavaScript code. This code constructs a long...

Apple iPhone 1.1.2 Remote Denial of Service Exploit

No description provided by source. htmlbodyscript function Demo var shellcode; var addr; var fill; alert'attempting a crash!'; shellcode = unescape'%u0c0c'; fill = unescape'%ucccc'; addr = 0x02020202; var b = fill; while b.length = 0x40000 b+=b; var c = new Array; for var i =0; i36; i++ ci = ...

iphone-dos.txt

function Demo var shellcode; var addr; var fill; alert'attempting a crash!'; shellcode = unescape'%u0c0c'; fill = unescape'%ucccc'; addr = 0x02020202; var b = fill; while b.length...

Apple iOS Mobile Safari - Memory Exhaustion Remote Denial of Service

Apple iOS Mobile Safari - Memory Exhaustion Remote Denial of Service source: https://www.securityfocus.com/bid/27442/info Apple iPhone is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a maliciously crafted webpage...

Apple iPhone 1.1.2 Remote Denial of Service Exploit

Exploit for hardware platform in category dos / poc =================================================== Apple iPhone 1.1.2 Remote Denial of Service Exploit =================================================== function Demo var shellcode; var addr; var fill; alert'attempting a crash!'; shellcode =...

Apple iOS Mobile Safari - Memory Exhaustion Remote Denial of Service

source: https://www.securityfocus.com/bid/27442/info Apple iPhone is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a maliciously crafted webpage. Successful attacks cause a kernel panic, crashing the device. Given the...

Apple iPhone Passcode Lock绕过安全限制漏洞

BUGTRAQ ID: 27297 CVECAN ID: CVE-2008-0034 Apple iPhone是苹果最新发布的智能手机。 iPhone的Passcode Lock功能允许用户锁定手机应用，除非输入了正确的密码，否则无法启动应用程序。但在处理紧急呼叫时的实现错误允许能够物理访问iPhone手机的用户无需输入密码便可以加载应用程序。 Apple iPhone 1.0 - 1.1.2 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.apple.com...

CVE-2008-0034

Unspecified vulnerability in Passcode Lock in Apple iPhone 1.0 through 1.1.2 allows users with physical access to execute applications without entering the passcode via vectors related to emergency calls...

CVE-2008-0034

Unspecified vulnerability in Passcode Lock in Apple iPhone 1.0 through 1.1.2 allows users with physical access to execute applications without entering the passcode via vectors related to emergency calls...