usbmuxd: User-assisted execution of arbitrary code

Background usbmuxd is a USB multiplex daemon for use with Apple iPhone and iPod Touch devices. Description The "receivepacket" function in libusbmuxd.c contains a boundary error when parsing the "SerialNumber" field of a USB device, which could cause a heap-based buffer overflow. Impact An attack...

Fedora Update for usbmuxd FEDORA-2012-1213

Check for the Version of usbmuxd OpenVAS Vulnerability Test Fedora Update for usbmuxd FEDORA-2012-1213 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[USN-1354-1] usbmuxd vulnerability

========================================================================== Ubuntu Security Notice USN-1354-1 February 01, 2012 usbmuxd vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Apple iOS代码签名检查漏洞

CVE ID：CVE-2011-3442 Apple iOS是一款运行在苹果iPhone和iPod touch设备上的最新的操作系统。 mmap系统调用对合法标记组合检查存在逻辑错误，此问题可导致绕过代码签名检查。 Apple iOS 5.x for iPhone 3GS and later Apple iOS for iPod touch 5.x 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息： http://support.apple.com/kb/HT5052...

Apple iOS CFNetwork敏感信息泄露漏洞

CVE ID：CVE-2011-3246 Apple iOS是一款运行在苹果iPhone和iPod touch设备上的最新的操作系统。 CFNetwork处理恶意特制URL存在问题，当访问特制的HTTP或HTTPS URL时，CFNetwork会导航到不正确的服务器上。 Apple iOS 5.x for iPhone 3GS and later Apple iOS for iPod touch 5.x 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息： http://support.apple.com/kb/HT5052...

Apple iOS libinfo信息泄露漏洞

CVE ID：CVE-2011-3441 Apple iOS是一款运行在苹果iPhone和iPod touch设备上的最新的操作系统。 libinfo处理DNS名查询存在问题，当解析恶意特制的主机名时，libinfo可返回不正确的结果。 Apple iOS 5.x for iPhone 3GS and later Apple iOS for iPod touch 5.x 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息： http://support.apple.com/kb/HT5052...

Hackers Install Siri on iPhone 4

Over the weekend, a pair of hackers successfully installed Apple’s previously iPhone 4S-exclusive voice assistant service, Siri, onto an iPhone 4 and fourth-generation iPod Touch. The hack works on jailbroken iOS devices. Steve Troughton-Smith and Grant Paul announced the hack via Twitter late...

iDefense Security Advisory 10.12.11: Apple Mobile OfficeImport Framework Word Document Parsing Memory Corruption Vulnerability

iDefense Security Advisory 10.12.11 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 12, 2011 I. BACKGROUND The OfficeImport framework is an API used by Apple's mobile devices, including the iPod Touch, iPhone, and iPad. The framework is used to parse and display Microsoft Office file...

Apple iOS 5 Released - Download Now !

Apple iOS 5 Released ! Apple's iOS 5 has been released, with owners of the iPhone 4, iPhone 3GS, iPad and iPad 2, along with the third- and fourth-gen iPod touch all getting the latest version of the mobile platform as a free update. Available to download for existing devices via iTunes, iOS 5 wi...

SA-CONTRIB-2011-033 - iWebkit - Cross Site Scripting

iWebKit is a web toolkit designed to create iPhone and iPod touch compatible websites and webapps. iWebkit does not properly sanitize menu links when displayed, allowing a malicious user to embed scripts in menu items, thus creating a cross site scripting XSS vulnerability that may lead to an...

Apple iOS "basicConstraints" X.509证书链验证漏洞

CVE ID: CVE-2011-0228 Apple iOS是运行在苹果iPhone和iPod touch设备上的最新的操作系统。 Apple iOS "basicConstraints" X.509在在实现上存在欺骗漏洞，远程用户可利用此漏洞执行欺骗攻击。 此漏洞源于在验证证书链中的证书"basicConstraints"参数时存在错误，通过中间人攻击，可欺骗任意域中的证书并泄露加密信息。 Apple iOS 4.x 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://support.apple.com/...

TWSL2011-007: iOS SSL Implementation Does Not Validate Certificate Chain

Trustwave's SpiderLabs Security Advisory TWSL2011-007: iOS SSL Implementation Does Not Validate Certificate Chain https://www.trustwave.com/spiderlabs/advisories/TWSL2011-007.txt Published: 2011-07-25 Version: 1.0 Vendor: Apple http://www.apple.com Product: iOS Version affected: Versions Prior to...

Apple Releases iOS 4.3.3, Addressing Location-Tracking Concerns

Apple has released iOS 4.3.3, a firmware update for the iPhone, iPod Touch and iPad that, among other things, fixes the controversial issues surrounding the location tracking capabilities of those devices. The firmware update is Apple’s response to the outcry that erupted last month when a pair o...

VUPEN Security Research - Apple Safari Text Nodes Remote Use-after-free Vulnerability (CVE-2011-1344)

VUPEN Security Research - Apple Safari Text Nodes Remote Use-after-free Vulnerability CVE-2011-1344 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Apple Safari is a web browser developed by Apple. As of February 2010, Safari was the fourth most widely used browser,...

iDefense Security Advisory 03.21.11: Apple OfficeImport Framework Excel Memory Corruption Vulnerability

iDefense Security Advisory 03.21.11 http://labs.idefense.com/intelligence/vulnerabilities/ Mar 21, 2011 I. BACKGROUND The OfficeImport framework is an API used by Apple's mobile devices, including the iPod Touch, iPhone, and iPad. The framework is used to parse and display Microsoft Office file...

checkview v1.1 for iPhone / iPod Touch Directory Traversal

Exploit for windows platform in category remote exploits Exploit Title: checkviewÃ¥ºä v1.1 for iPhone / iPod touch, Directory Traversal Date: 03/14/2011 Author: email protected E-Mail : kimastory at gmail dot com Twitter : http://twitter.com/kimastory Software Link:...

iOS Checkview 1.1 - Directory Traversal

iOS Checkview 1.1 - Directory Traversal Exploit Title: checkviewÃ¥ºä v1.1 for iPhone / iPod touch, Directory Traversal Date: 03/14/2011 Author: kim@story E-Mail : kimastory at gmail dot com Twitter : http://twitter.com/kimastory Software Link: http://itunes.apple.com/En/app/id381116321 Version: 1...

Apple Releases iOS 4.3

Apple has released iOS 4.3 for the iPhone 3 GS and later, iPod touch 3rd generation and later, and iPad to address multiple vulnerabilities. These vulnerabilities affect the CoreGraphics, ImageIO, libxml, Networking, Safari, and WebKit packages. Exploitation of these vulnerabilities may allow an...

iFileExplorer Free Directory Traversal

Exploit Title: iPod Touch/iPhone iFileExplorer Free Directory Traversal Date: 04/03/2011 UK date format Author: theSmallNothing Software Link: http://itunes.apple.com/gb/app/ifileexplorer-protect-multi/id355253462?mt=8 Version: 2.8 Tested on: iPod Touch 2G 4.1 import urllib, sqlite3 base =...

iPod Touch/iPhone iFileExplorer Free Directory Traversal

Exploit for hardware platform in category remote exploits Exploit Title: iPod Touch/iPhone iFileExplorer Free Directory Traversal Date: 04/03/2011 UK date format Author: theSmallNothing Software Link: http://itunes.apple.com/gb/app/ifileexplorer-protect-multi/id355253462?mt=8 Version: 2.8 Tested...