PT-2008-3145 · Apple · Safari

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 2.0 on Apple iPhone and iPod touch Description: The issue misinterprets a menu button press as user confirmation for visiting a web site with a self-signed or invalid certificate. This makes it easier for remote...

PT-2008-3144 · Apple · Iphone +2

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 2.0 on Apple iPhone and iPod touch Description: The issue allows remote attackers to spoof the address bar via Unicode ideographic spaces in the URL. Recommendations: For Safari versions prior to 2.0 on Apple iPhone a...

PT-2008-3794 · Apple · Iphone +2

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 2.0 on Apple iPhone Safari versions prior to 2.0 on iPod touch Description: The issue is related to an integer signedness error that can be triggered via JavaScript array indices, leading to an out-of-bounds access...

Apple iPhone Apple iPod Touch 2.0 - Multiple Remote Vulnerabilities

Apple iPhone Apple iPod Touch 2.0 - Multiple Remote Vulnerabilities source: https://www.securityfocus.com/bid/30186/info Apple iPhone and iPod touch are prone to multiple remote vulnerabilities: 1. A vulnerability that may allow users to spoof websites. 2. An information-disclosure vulnerability...

Multiple Vendor DNS Protocol Insufficient Transaction ID Randomization DNS Spoofing Vulnerability

Description Multiple vendors' implementations of the DNS protocol are prone to a DNS-spoofing vulnerability because the software fails to securely implement random values when performing DNS queries. Successfully exploiting this issue allows remote attackers to spoof DNS replies, allowing them to...

PT-2008-1163 · Apple +2 · Iphone +4

Name of the Vulnerable Software and Affected Versions: Apple iPod touch versions 1.1 through 2.0.2 Apple iPhone versions 1.0 through 2.0.2 Qt affected versions not specified Description: The issue is related to a use-after-free vulnerability in WebKit and an error in resource management in the Qt...

Apple iPhone和iPod Touch Foundation参数内存破坏漏洞

BUGTRAQ ID: 27296 CVECAN ID: CVE-2008-0035 iPod touch（也被称为iTouch）是苹果公司发布的MP4播放器，iPhone是其发布的智能手机。 iPhone和iPod Touch所内嵌的Safari浏览器处理畸形URL时存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 Safari浏览器没有正确地处理URL中的Foundation参数，如果用户受骗跟随了恶意链接的话，就可能触发内存破坏，导致浏览器崩溃或执行任意指令。 Apple iPhone 1.0 - 1.1.2 Apple iTouch 1.1 - 1.1.2 Apple -----...

PT-2008-1697 · Apple · Iphone +3

Name of the Vulnerable Software and Affected Versions: Apple iPhone versions 1.0 through 1.1.2 Apple iPod touch versions 1.1 through 1.1.2 Apple Mac OS X versions 10.5 through 10.5.1 Description: The issue allows remote attackers to cause a denial of service or execute arbitrary code via a crafte...

Cross site scripting

WebKit in Safari in Apple Mac OS X 10.4.11 and 10.5.1, iPhone 1.0 through 1.1.2, and iPod touch 1.1 through 1.1.2 allows remote attackers to "navigate the subframes of any other page," which can be leveraged to conduct cross-site scripting XSS attacks and obtain sensitive information...

CVE-2007-5858

WebKit in Safari in Apple Mac OS X 10.4.11 and 10.5.1, iPhone 1.0 through 1.1.2, and iPod touch 1.1 through 1.1.2 allows remote attackers to "navigate the subframes of any other page," which can be leveraged to conduct cross-site scripting XSS attacks and obtain sensitive information...

CVE-2007-5858

WebKit in Safari in Apple Mac OS X 10.4.11 and 10.5.1, iPhone 1.0 through 1.1.2, and iPod touch 1.1 through 1.1.2 allows remote attackers to "navigate the subframes of any other page," which can be leveraged to conduct cross-site scripting XSS attacks and obtain sensitive information...

PT-2007-6818 · Apple · Iphone +2

Name of the Vulnerable Software and Affected Versions: Safari versions 10.4.11 and 10.5.1 iPhone versions 1.0 through 1.1.2 iPod touch versions 1.1 through 1.1.2 Description: The issue allows remote attackers to navigate the subframes of any other page, which can be leveraged to conduct cross-sit...

Unfixed XSS vulnerability at www.ipod-apple.cz

Security researcher 1NF1N1TY, has submitted on 14/12/2007 a cross-site-scripting XSS vulnerability affecting www.ipod-apple.cz, which at the time of submission ranked 397163 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2007. It is...

CVE-2007-5450

Unspecified vulnerability in Safari on the Apple iPod touch aka iTouch and iPhone 1.1.1 allows user-assisted remote attackers to cause a denial of service application crash, and enable filesystem browsing by the local user, via a certain TIFF file...

Code injection

Unspecified vulnerability in Safari on the Apple iPod touch aka iTouch and iPhone 1.1.1 allows user-assisted remote attackers to cause a denial of service application crash, and enable filesystem browsing by the local user, via a certain TIFF file...

CVE-2007-5450

CVE-2007-5450 affects Safari on Apple iPod touch and iPhone (v1.1.1). The vulnerability allows user-assisted remote attackers to crash the application and enable local filesystem browsing by processing a crafted TIFF file, exposing a denial-of-service risk and local data exposure. The PT-2007-648...

CVE-2007-5450

Unspecified vulnerability in Safari on the Apple iPod touch aka iTouch and iPhone 1.1.1 allows user-assisted remote attackers to cause a denial of service application crash, and enable filesystem browsing by the local user, via a certain TIFF file...

PT-2007-6486 · Apple · Safari

Name of the Vulnerable Software and Affected Versions: Safari on Apple iPod touch and iPhone version 1.1.1 Description: The issue allows user-assisted remote attackers to cause an application crash and enable filesystem browsing by the local user via a certain TIFF file. This can result in a deni...

CVE-2007-0018

Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control NCTAudioFile2.dll, as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include 1 NCTsoft NCTAudioStudio, NCTAudioEdito...

CVE-2006-6547

Buffer overflow in the readAA function in readaa.cpp in Winamp iPod Plugin mlipod 2.00 p19 and earlier allows remote attackers to cause a denial of service application crash or execute arbitrary code via a long tag in an audible.com audiobook aa file...