PT-2008-1697 · Apple · Iphone +3

Name of the Vulnerable Software and Affected Versions: Apple iPhone versions 1.0 through 1.1.2 Apple iPod touch versions 1.1 through 1.1.2 Apple Mac OS X versions 10.5 through 10.5.1 Description: The issue allows remote attackers to cause a denial of service or execute arbitrary code via a crafte...

Cross site scripting

WebKit in Safari in Apple Mac OS X 10.4.11 and 10.5.1, iPhone 1.0 through 1.1.2, and iPod touch 1.1 through 1.1.2 allows remote attackers to "navigate the subframes of any other page," which can be leveraged to conduct cross-site scripting XSS attacks and obtain sensitive information...

CVE-2007-5858

WebKit in Safari in Apple Mac OS X 10.4.11 and 10.5.1, iPhone 1.0 through 1.1.2, and iPod touch 1.1 through 1.1.2 allows remote attackers to "navigate the subframes of any other page," which can be leveraged to conduct cross-site scripting XSS attacks and obtain sensitive information...

CVE-2007-5858

WebKit in Safari in Apple Mac OS X 10.4.11 and 10.5.1, iPhone 1.0 through 1.1.2, and iPod touch 1.1 through 1.1.2 allows remote attackers to "navigate the subframes of any other page," which can be leveraged to conduct cross-site scripting XSS attacks and obtain sensitive information...

PT-2007-6818 · Apple · Iphone +2

Name of the Vulnerable Software and Affected Versions: Safari versions 10.4.11 and 10.5.1 iPhone versions 1.0 through 1.1.2 iPod touch versions 1.1 through 1.1.2 Description: The issue allows remote attackers to navigate the subframes of any other page, which can be leveraged to conduct cross-sit...

Unfixed XSS vulnerability at www.ipod-apple.cz

Security researcher 1NF1N1TY, has submitted on 14/12/2007 a cross-site-scripting XSS vulnerability affecting www.ipod-apple.cz, which at the time of submission ranked 397163 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2007. It is...

CVE-2007-5450

Unspecified vulnerability in Safari on the Apple iPod touch aka iTouch and iPhone 1.1.1 allows user-assisted remote attackers to cause a denial of service application crash, and enable filesystem browsing by the local user, via a certain TIFF file...

Code injection

Unspecified vulnerability in Safari on the Apple iPod touch aka iTouch and iPhone 1.1.1 allows user-assisted remote attackers to cause a denial of service application crash, and enable filesystem browsing by the local user, via a certain TIFF file...

CVE-2007-5450

Unspecified vulnerability in Safari on the Apple iPod touch aka iTouch and iPhone 1.1.1 allows user-assisted remote attackers to cause a denial of service application crash, and enable filesystem browsing by the local user, via a certain TIFF file...

CVE-2007-5450

CVE-2007-5450 affects Safari on Apple iPod touch and iPhone (v1.1.1). The vulnerability allows user-assisted remote attackers to crash the application and enable local filesystem browsing by processing a crafted TIFF file, exposing a denial-of-service risk and local data exposure. The PT-2007-648...

CVE-2007-5450: Improper Restriction of Operations within the Bounds of a Memory Buffer

Unspecified vulnerability in Safari on the Apple iPod touch aka iTouch and iPhone 1.1.1 allows user-assisted remote attackers to cause a denial of service application crash, and enable filesystem browsing by the local user, via a certain TIFF file...

PT-2007-6486 · Apple · Safari

Name of the Vulnerable Software and Affected Versions: Safari on Apple iPod touch and iPhone version 1.1.1 Description: The issue allows user-assisted remote attackers to cause an application crash and enable filesystem browsing by the local user via a certain TIFF file. This can result in a deni...

CVE-2007-0018

Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control NCTAudioFile2.dll, as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include 1 NCTsoft NCTAudioStudio, NCTAudioEdito...

CVE-2006-6547

Buffer overflow in the readAA function in readaa.cpp in Winamp iPod Plugin mlipod 2.00 p19 and earlier allows remote attackers to cause a denial of service application crash or execute arbitrary code via a long tag in an audible.com audiobook aa file...

CVE-2006-6547

Buffer overflow in the readAA function in readaa.cpp in Winamp iPod Plugin mlipod 2.00 p19 and earlier allows remote attackers to cause a denial of service application crash or execute arbitrary code via a long tag in an audible.com audiobook aa file...

CVE-2006-6547

The CVE-2006-6547 entry describes a buffer overflow in the Winamp iPod Plugin (ml_ipod) readAA function (read_aa.cpp) affecting version 2.00 p19 and earlier. An attacker can exploit a long tag in an audible.com audiobook (aa) file to trigger a denial of service (application crash) or potentially ...

CVE-2006-6547: Undefined Security Weakness

Buffer overflow in the readAA function in readaa.cpp in Winamp iPod Plugin mlipod 2.00 p19 and earlier allows remote attackers to cause a denial of service application crash or execute arbitrary code via a long tag in an audible.com audiobook aa file...

CVE-2006-2488: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Spymac WebOS WOS 5.0 allow remote attackers to inject arbitrary web script or HTML via the 1 delfolder, 2 nick, or 3 action parameters to a notes/index.php, 4 curr parameter to b ipod/getipod.php, and in c login.php...

[SECURITY] New version if ipopd prevents exploit

We have received reports that the version of the imap suite in Debian GNU/Linux 2.1 has a vulnerability in its POP-2 daemon, which can be found in the ipopd package. Using this vulnerability it is possible for remote users to get a shell as user "nobody" on the server. We recommend you upgrade yo...