4682 matches found
CVE-2007-3759: Undefined Security Weakness
Safari in Apple iPhone 1.1.1, when requested to disable Javascript, does not disable it until Safari is restarted, which might leave Safari open to attacks that the user does not expect...
CVE-2007-3761: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Safari in Apple iPhone 1.1.1 allows remote attackers to inject arbitrary web script or HTML by causing Javascript events to be applied to a frame in another domain...
CVE-2007-3753: Improper Input Validation
Apple iPhone 1.1.1, with Bluetooth enabled, allows physically proximate attackers to cause a denial of service application termination and execute arbitrary code via crafted Service Discovery Protocol SDP packets, related to insufficient input validation...
CVE-2007-3755: Improper Input Validation
Mail in Apple iPhone 1.1.1 allows remote user-assisted attackers to force the iPhone user to make calls to arbitrary telephone numbers via a "tel:" link, which does not prompt the user before dialing the number...
PT-2007-5002 · Apple · Iphone
Name of the Vulnerable Software and Affected Versions: Apple iPhone version 1.1.1 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML by causing Javascript events to be applied to a frame in another domain. This is a general information abo...
CVE-2007-3757: Improper Input Validation
Safari in Apple iPhone 1.1.1 allows remote user-assisted attackers to trick the iPhone user into making calls to arbitrary telephone numbers via a crafted "tel:" link that causes iPhone to display a different number than the number that will be dialed...
PT-2007-4994 · Apple · Iphone
Name of the Vulnerable Software and Affected Versions: Apple iPhone version 1.1.1 Description: The issue allows physically proximate attackers to cause a denial of service and execute arbitrary code via crafted Service Discovery Protocol SDP packets. This is related to insufficient input validati...
PT-2007-4996 · Apple · Iphone
Name of the Vulnerable Software and Affected Versions: Apple iPhone version 1.1.1 Description: The issue allows remote user-assisted attackers to force the iPhone user to make calls to arbitrary telephone numbers via a "tel:" link. This link does not prompt the user before dialing the number...
PT-2007-4995 · Apple · Iphone
Name of the Vulnerable Software and Affected Versions: Apple iPhone version 1.1.1 Description: The issue allows remote attackers to steal credentials and read email via a man-in-the-middle MITM attack because Mail in Apple iPhone does not warn the user when the mail server changes or is not trust...
PT-2007-5001 · Apple · Iphone +1
Name of the Vulnerable Software and Affected Versions: Safari versions 3 before Beta Update 3.0.4 Safari in Apple iPhone version 1.1.1 Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via frame tags. Recommendations: For Safari versions 3...
PT-2007-5829 · Apple · Iphone +2
Name of the Vulnerable Software and Affected Versions: Safari versions prior to 3.0.4 on Windows and Mac OS X Safari in Apple iPhone version 1.1.1 Description: The issue allows remote attackers to alter or access HTTPS content via an HTTP session with a crafted web page that causes Javascript to ...
PT-2007-4998 · Apple · Iphone
Name of the Vulnerable Software and Affected Versions: Apple iPhone version 1.1.1 Description: The issue allows remote user-assisted attackers to trick the iPhone user into making calls to arbitrary telephone numbers via a crafted "tel:" link. This link causes the iPhone to display a different...
CVE-2007-4671: Improper Input Validation
Unspecified vulnerability in Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4 through 10.4.10, allows remote attackers to "alter or access" HTTPS content via an HTTP session with a crafted web page that causes Javascript to be applied to HTTPS pages...
CVE-2007-3754: Improper Authentication
Mail in Apple iPhone 1.1.1, when using SSL, does not warn the user when the mail server changes or is not trusted, which might allow remote attackers to steal credentials and read email via a man-in-the-middle MITM attack...
PT-2007-5000 · Apple · Iphone +1
Name of the Vulnerable Software and Affected Versions: Apple iPhone version 1.1.1 Description: The issue concerns Safari not fully disabling Javascript when requested, potentially leaving it open to unexpected attacks until Safari is restarted. Recommendations: For Apple iPhone version 1.1.1,...
CVE-2007-3760: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4 through 10.4.10, allows remote attackers to inject arbitrary web script or HTML via frame tags...
Apple iOS iPhone Vibrate
Causes the iPhone to vibrate, only works when the AudioToolkit library has been loaded. Based on work by Charlie Miller . This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 16 include...
Code injection
WebKit in Apple Safari 3 Beta before Update 3.0.3, and iPhone before 1.0.1, does not properly handle the interaction between International Domain Name IDN support and Unicode fonts, which allows remote attackers to create a URL containing "look-alike characters" homographs and possibly perform...
CVE-2007-3742
WebKit in Apple Safari 3 Beta before Update 3.0.3, and iPhone before 1.0.1, does not properly handle the interaction between International Domain Name IDN support and Unicode fonts, which allows remote attackers to create a URL containing "look-alike characters" homographs and possibly perform...
CVE-2007-3742: Improper Link Resolution Before File Access
WebKit in Apple Safari 3 Beta before Update 3.0.3, and iPhone before 1.0.1, does not properly handle the interaction between International Domain Name IDN support and Unicode fonts, which allows remote attackers to create a URL containing "look-alike characters" homographs and possibly perform...