638 matches found
CVE-2008-3950
Off-by-one error in the webdrawInRect:withFont:ellipsis:alignment:measureOnly function in WebKit in Safari in Apple iPhone 1.1.4 and 2.0 and iPod touch 1.1.4 and 2.0 allows remote attackers to cause a denial of service browser crash via a JavaScript alert call with an argument that lacks breakabl...
CVE-2008-3950
Off-by-one error in the webdrawInRect:withFont:ellipsis:alignment:measureOnly function in WebKit in Safari in Apple iPhone 1.1.4 and 2.0 and iPod touch 1.1.4 and 2.0 allows remote attackers to cause a denial of service browser crash via a JavaScript alert call with an argument that lacks breakabl...
Design/Logic Flaw
Off-by-one error in the webdrawInRect:withFont:ellipsis:alignment:measureOnly function in WebKit in Safari in Apple iPhone 1.1.4 and 2.0 and iPod touch 1.1.4 and 2.0 allows remote attackers to cause a denial of service browser crash via a JavaScript alert call with an argument that lacks breakabl...
CVE-2008-3950
The CVE is based on a real DoS vulnerability in WebKit used by Safari on iPhone/iPod touch (versions 1.1.4 and 2.0). The issue is an off-by-one in _web_drawInRect:withFont:ellipsis:alignment:measureOnly: triggered by a crafted alert() string with a length that is a multiple of the 4096-byte memor...
CORE-2008-0126: iPhone Safari JavaScript alert Denial of Service
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ iPhone Safari JavaScript alert Denial of Service 1. Advisory Information Title: iPhone Safari JavaScript alert Denial of Service Advisory ID: CORE-2008-0603 Advisory...
Apple iOS 1.1.42.0 iPod 1.1.42.0 touch Safari WebKit - alert() Remote Denial of Service
Apple iOS 1.1.42.0 iPod 1.1.42.0 touch Safari WebKit - alert Remote Denial of Service source: https://www.securityfocus.com/bid/31061/info Apple iPhone and iPod touch are prone to a remote denial-of-service vulnerability that occurs in the WebKit library used by the Safari browser. Remote attacke...
Apple iOS 1.1.4/2.0 / iPod 1.1.4/2.0 touch Safari WebKit - 'alert()' Remote Denial of Service
source: https://www.securityfocus.com/bid/31061/info Apple iPhone and iPod touch are prone to a remote denial-of-service vulnerability that occurs in the WebKit library used by the Safari browser. Remote attackers can exploit this issue to crash the affected browser installed on the devices,...
CVE-2008-3612
The Networking subsystem in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, uses predictable TCP initial sequence numbers, which allows remote attackers to spoof or hijack a TCP connection...
CVE-2008-3631
Application Sandbox in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, does not properly isolate third-party applications, which allows attackers to read arbitrary files in a third-party application's sandbox via a different third-party application...
CVE-2008-3632
Use-after-free vulnerability in WebKit in Apple iPod touch 1.1 through 2.0.2, and iPhone 1.0 through 2.0.2, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a web page with crafted Cascading Style Sheets CSS import statements...
Design/Logic Flaw
The Networking subsystem in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, uses predictable TCP initial sequence numbers, which allows remote attackers to spoof or hijack a TCP connection...
Code injection
Application Sandbox in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, does not properly isolate third-party applications, which allows attackers to read arbitrary files in a third-party application's sandbox via a different third-party application...
Design/Logic Flaw
Use-after-free vulnerability in WebKit in Apple iPod touch 1.1 through 2.0.2, and iPhone 1.0 through 2.0.2, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a web page with crafted Cascading Style Sheets CSS import statements...
Apple iPod Touch 2.1版本之前多个远程漏洞
BUGTRAQ ID: 31092 CVE ID：CVE-2008-3631 CVE-2008-3612 CVE-2008-3632 CNCVE ID：CNCVE-20083631 CNCVE-20083612 CNCVE-20083632 Apple iPod Touch是一款苹果公司发布的MP4播放器。 Apple iPod Touch存在多个安全问题，远程攻击者可以利用漏洞允许用户伪造WEB站点，获得敏感信息及任意代码执行等攻击。 CVE-ID: CVE-2008-3631：...
CVE-2008-3632
CVE-2008-3632 is a WebKit use-after-free vulnerability reported in SUSE/Nessus entries, affecting Apple iPod touch (1.1–2.0.2) and iPhone (1.0–2.0.2). The flaw arises in the CSS import handling of WebKit, enabling a remote attacker to trigger arbitrary code execution or cause an application crash...
CVE-2008-3631
Application Sandbox in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, does not properly isolate third-party applications, which allows attackers to read arbitrary files in a third-party application's sandbox via a different third-party application...
CVE-2008-3632
Use-after-free vulnerability in WebKit in Apple iPod touch 1.1 through 2.0.2, and iPhone 1.0 through 2.0.2, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a web page with crafted Cascading Style Sheets CSS import statements...
CVE-2008-3612
The CVE-2008-3612 entry affects Apple iPod touch 2.0–2.0.2 and iPhone 2.0–2.0.2, where the Networking subsystem uses predictable TCP initial sequence numbers. This design allows remote attackers to spoof or hijack TCP connections. Documented impact includes potential spoofing and session hijackin...
CVE-2008-3631
CVE-2008-3631 affects Apple iPod touch/iPhone 2.0 era. The Application Sandbox fails to properly isolate third‑party applications, allowing a malicious or compromised third‑party app to read arbitrary files in another third‑party sandbox. Root cause: inadequate sandbox isolation between third‑par...
