CVE-2010-1775

Apple iOS before 4 is affected by a race condition in the Passcode Lock feature. The vulnerability allows physically proximate attackers to bypass passcode requirements and pair a locked device with a computer to access arbitrary data, via vectors involving the initial boot. Affected component: P...

CVE-2010-1407

CVE-2010-1407 affects WebKit in Apple iOS prior to version 4, where history.replaceState implemented with IFRAME handling could allow a remote attacker to obtain sensitive information via a crafted HTML document. The NVD entry assigns a CVSS v2 base score of 4.3 (Medium) with network attack vecto...

CVE-2010-1755

CVE-2010-1755 affects Safari on Apple iOS before 4 (iPhone, iPod touch). The root cause is the improper implementation of the Accept Cookies preference, which could allow remote web servers to track users via cookies. Documented impact is user tracking; CVSS-based metrics indicate low to medium o...

CVE-2010-1754

CVE-2010-1754 covers a vulnerability in Apple iOS prior to version 4 where Passcode Lock does not properly handle alert-based unlocks in conjunction with subsequent Remote Lock operations via MobileMe. This could allow physically proximate attackers to bypass the intended passcode requirements. A...

CVE-2010-1751

Apple iOS before 4 (on iPhone and iPod touch) is affected by CVE-2010-1751 due to the Application Sandbox not preventing access to the photo library, which could allow remote attackers to obtain location information via unspecified vectors. The issue is described across multiple sources as a weak...

CVE-2010-1775

Race condition in Passcode Lock in Apple iOS before 4 on the iPhone and iPod touch allows physically proximate attackers to bypass intended passcode requirements, and pair a locked device with a computer and access arbitrary data, via vectors involving the initial boot...

iphone/ipod discover the File Manager web service directory traversal vulnerability-vulnerability warning-the black bar safety net

from:Xeye Team discover is an iphone/ipod touch platform on the popular file Manager, can read pdf/office/txt format files And via wifi to share these files, a detailed description look at this: http://itunes.apple.com/us/app/discover/id292416855?mt=8 Vulnerability analysis When the wifi...

CVE-2010-2332

Impact Financials, Inc. Impact PDF Reader 2.0, 1.2, and other versions for iPhone and iPod touch allows remote attackers to cause a denial of service server crash via a "..." body in a POST request...

CVE-2010-2332

Technical details about CVE-2010-2332 are not publicly disclosed in the provided documents. Monitor for updates from official sources.

Design/Logic Flaw

Use-after-free vulnerability in JavaScriptCore in WebKit in Apple iTunes before 9.2 on Windows, and Apple iOS before 4 on the iPhone and iPod touch, allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors related to page transitions, a differen...

CVE-2010-1769

WebKit in Apple iTunes before 9.2 on Windows, and Apple iOS before 4 on the iPhone and iPod touch, accesses out-of-bounds memory during the handling of tables, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted HTML document, a...

CVE-2010-1769

Removed by vendor...

CVE-2010-1769

WebKit in Apple iTunes before 9.2 on Windows, and Apple iOS before 4 on the iPhone and iPod touch, accesses out-of-bounds memory during the handling of tables, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted HTML document, a...

QuickOffice v3.1.0 for iPhone/iPod Touch Malformed HTTP Method Remote DoS

No description provided by source. Exploit: QuickOffice v3.1.0 for iPhone/iPod Touch Malformed HTTP Method Remote DoS Author: Nishant Das Patnaik Website: http://nishantdaspatnaik.yolasite.com Software Link: http://itunes.apple.com/us/app/quickoffice-connect/id304673686?mt=8 Version: 3.1.0 Tested...

Impact PDF Reader 2.0 For iPhone/iPod Touch Denial Of Service

Exploit: Impact PDF Reader v2.0 for iPhone/iPod Touch POST Method Remote DoS Date: 14/06/2010 Author: Nishant Das Patnaik Website: http://nishantdaspatnaik.yolasite.com Software Link: N/A Version: 2.0, 1.2 Tested on: iPod 2G with iOS v3.1.3 Note: Impact PDF Reader v2.0 and prior program versions...

QuickOffice 3.1.0 For iPhone/iPod Touch Denial Of Service

Exploit: QuickOffice v3.1.0 for iPhone/iPod Touch Malformed HTTP Method Remote DoS Date: 14/06/2010 Author: Nishant Das Patnaik Website: http://nishantdaspatnaik.yolasite.com Software Link: http://itunes.apple.com/us/app/quickoffice-connect/id304673686?mt=8 Version: 3.1.0 Tested on: iPod 2G with...

QuickOffice v3.1.0 for iPhone/iPod Touch Malformed HTTP Method DoS

Exploit for hardware platform in category dos / poc ========================================================================= QuickOffice v3.1.0 for iPhone/iPod Touch Malformed HTTP Method Remote DoS ========================================================================= Exploit: QuickOffice...

Impact PDF Reader v2.0 for iPhone/iPod Touch POST Method Remote DoS

Exploit for hardware platform in category dos / poc =================================================================== Impact PDF Reader v2.0 for iPhone/iPod Touch POST Method Remote DoS =================================================================== Exploit: Impact PDF Reader v2.0 for...

Savy Soda Documents - Mobile Office Suite .XLS Denial of Service

Savy Soda Documents - Mobile Office Suite .XLS Denial of Service I wrote a fuzzer "dumb fuzzer" and used a sample from http://www.ccp14.ac.uk/ccp/web-mirrors/bca-spreadsheets/scanplot101.xls which I randomly found on the internet. I mutated the data and tested roughly 1000 cases on several Docume...

Office 2 iPhone XLS Denial of Service

Exploit for hardware platform in category dos / poc ===================================== Office 2 iPhone XLS Denial of Service ===================================== I wrote a fuzzer "dumb fuzzer" and used a sample from http://www.inj3ct0r.com/sploits/12662.xls which I randomly found on the...