Apple iOS 5.1.1 Safari Browser - JS match() search() Crash (PoC)

Apple iOS 5.1.1 Safari Browser - JS match search Crash PoC !/usr/bin/env ruby - Title iOS \n\ Crash PoC\n\ \n\ var s = "poc";\n\ s.match"chrbufferlen";\n\ \n\ "; def help puts "iOS = v5.1.1 Safari Browser JS match, search Crash PoC" puts "$0 -p bindport -h bindaddress --verbose" end Parsing...

Apple Releases iOS 5.1.1

Apple has released iOS 5.1.1 for iPhone, iPod, iPad, and iPad 2 to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code, perform a cross-site-scripting attack, or spoof a website address. US-CERT encourages users and administrators to review Appl...

Fedora Update for usbmuxd FEDORA-2012-1192

Check for the Version of usbmuxd OpenVAS Vulnerability Test Fedora Update for usbmuxd FEDORA-2012-1192 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Apple iPhone/iPad/iPod touch iOS 5.1之前版本多个漏洞

BUGTRAQ ID: 52364 iPhone是一部4频段的GSM制式手机。iPad是触摸屏平板电脑。iPod touch是一款由苹果公司推出的可携式媒体播放器。Apple iOS是运行在苹果iPhone和iPod touch设备上的最新的操作系统。 Apple iPhone、iPod touch及iPad所使用的iOS在实现上存在多个安全漏洞，成功利用后可使受影响设备崩溃、绕过安全限制、获取敏感信息或执行任意代码。这些漏洞影响下列组件：CFNetwork、HFS，Kernel、Passcode Lock Safari、Siri、VPN 。 0 Apple iPhone 4.x App...

APPLE-SA-2012-03-07-2 iOS 5.1 Software Update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2012-03-07-2 iOS 5.1 Software Update iOS 5.1 Software Update is now available and addresses the following: CFNetwork Available for: iPhone 3GS, iPhone 4, iPhone 4S, iPod touch 3rd generation and later, iPad, iPad 2 Impact: Visiting a...

usbmuxd: User-assisted execution of arbitrary code

Background usbmuxd is a USB multiplex daemon for use with Apple iPhone and iPod Touch devices. Description The "receivepacket" function in libusbmuxd.c contains a boundary error when parsing the "SerialNumber" field of a USB device, which could cause a heap-based buffer overflow. Impact An attack...

Fedora Update for usbmuxd FEDORA-2012-1213

Check for the Version of usbmuxd OpenVAS Vulnerability Test Fedora Update for usbmuxd FEDORA-2012-1213 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 16 Update: usbmuxd-1.0.7-3.fc16

usbmuxd is a daemon used for communicating with Apple's iPod Touch and iPho ne devices. It allows multiple services on the device to be accessed simultaneously...

[USN-1354-1] usbmuxd vulnerability

========================================================================== Ubuntu Security Notice USN-1354-1 February 01, 2012 usbmuxd vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Apple iOS CFNetwork敏感信息泄露漏洞

CVE ID：CVE-2011-3246 Apple iOS是一款运行在苹果iPhone和iPod touch设备上的最新的操作系统。 CFNetwork处理恶意特制URL存在问题，当访问特制的HTTP或HTTPS URL时，CFNetwork会导航到不正确的服务器上。 Apple iOS 5.x for iPhone 3GS and later Apple iOS for iPod touch 5.x 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息： http://support.apple.com/kb/HT5052...

Apple iOS代码签名检查漏洞

CVE ID：CVE-2011-3442 Apple iOS是一款运行在苹果iPhone和iPod touch设备上的最新的操作系统。 mmap系统调用对合法标记组合检查存在逻辑错误，此问题可导致绕过代码签名检查。 Apple iOS 5.x for iPhone 3GS and later Apple iOS for iPod touch 5.x 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息： http://support.apple.com/kb/HT5052...

Apple iOS libinfo信息泄露漏洞

CVE ID：CVE-2011-3441 Apple iOS是一款运行在苹果iPhone和iPod touch设备上的最新的操作系统。 libinfo处理DNS名查询存在问题，当解析恶意特制的主机名时，libinfo可返回不正确的结果。 Apple iOS 5.x for iPhone 3GS and later Apple iOS for iPod touch 5.x 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息： http://support.apple.com/kb/HT5052...

Apple Releases iOS 5.0.1

Apple has released iOS 5.0.1 for the iPhone 3GS, iPhone 4, iPhone 4S, iPod 3rd generation or later, iPad, and iPad 2 to address multiple vulnerabilities. These vulnerabilities may allow an attacker execute arbitrary code or obtain sensitive information. US-CERT encourages users and administrators...

Hackers Install Siri on iPhone 4

Over the weekend, a pair of hackers successfully installed Apple’s previously iPhone 4S-exclusive voice assistant service, Siri, onto an iPhone 4 and fourth-generation iPod Touch. The hack works on jailbroken iOS devices. Steve Troughton-Smith and Grant Paul announced the hack via Twitter late...

Most advanced and dangerous malware for Apple products - why you should be concerned !

Most advanced and dangerous malware for Apple products - Why you should be concerned ! Indian security researcher from MalCon has created an advanced and dangerous malware for Apple products which can not only compromize your privacy but also steal important data and let hackers control your...

Apple iTunes CoreAudio缓冲区溢出漏洞

BUGTRAQ ID: 50065 CVE ID: CVE-2011-3252 iTunes是一款媒体播放器的应用程序，2001年1月10日由苹果电脑在旧金山的Macworld Expo推出，用来播放以及管理数字音乐和与视频文件，是管理苹果iPod的文件的主要工具。 Apple iTunes在实现上存在缓冲区溢出漏洞，远程攻击者可利用此漏洞执行任意代码，可能造成拒绝服务。 此漏洞源于应用解析高级音频解码器编码的音频流的方式，会读取文件中的字段以计算长度，稍后会用在内存复制到静态缓冲区操作中。 Apple iTunes 10.x 厂商补丁： Apple -----...

iDefense Security Advisory 10.12.11: Apple Mobile OfficeImport Framework Word Document Parsing Memory Corruption Vulnerability

iDefense Security Advisory 10.12.11 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 12, 2011 I. BACKGROUND The OfficeImport framework is an API used by Apple's mobile devices, including the iPod Touch, iPhone, and iPad. The framework is used to parse and display Microsoft Office file...

Apple iTunes多个安全漏洞

CVE ID:...

Apple iOS 5 Released - Download Now !

Apple iOS 5 Released ! Apple's iOS 5 has been released, with owners of the iPhone 4, iPhone 3GS, iPad and iPad 2, along with the third- and fourth-gen iPod touch all getting the latest version of the mobile platform as a free update. Available to download for existing devices via iTunes, iOS 5 wi...

SA-CONTRIB-2011-033 - iWebkit - Cross Site Scripting

iWebKit is a web toolkit designed to create iPhone and iPod touch compatible websites and webapps. iWebkit does not properly sanitize menu links when displayed, allowing a malicious user to embed scripts in menu items, thus creating a cross site scripting XSS vulnerability that may lead to an...