5758 matches found
CVE-2015-5920
The Software Update component in Apple iTunes before 12.3 does not properly handle redirection, which allows man-in-the-middle attackers to discover encrypted SMB credentials via unspecified vectors...
CVE-2015-5810
WebKit vulnerability CVE-2015-5810 affects Apple’s WebKit used in iOS prior to 9 and iTunes prior to 12.3. A crafted website can remotely trigger memory corruption to execute arbitrary code or cause a denial of service (application crash). The issue is described as a distinct vulnerability from o...
CVE-2015-5796
CVE-2015-5796 concerns WebKit as used in Apple iOS before 9 and iTunes before 12.3. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, distinct from other WebKit CVEs cited by Apple. Th...
CVE-2015-5822
WebKit, as used in JavaScriptCore in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...
CVE-2015-5815
WebKit, as used in Apple iTunes before 12.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in...
CVE-2015-5920
CVE-2015-5920 affects Apple iTunes for Windows prior to 12.3. The Software Update component mishandles redirection, enabling a man-in-the-middle to discover encrypted SMB credentials via unspecified vectors. Impact: partial disclosure of credentials; exploit context and vectors are not detailed i...
CVE-2015-5874
CVE-2015-5874 affects CoreText in iOS (pre-9) and the iTunes desktop app (pre-12.3). A crafted font file can cause remote code execution or memory corruption. Affected components: CoreText processing; the issue is exploitable via crafted font data delivered remotely. Remediation per documents: up...
CVE-2015-5817
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...
CVE-2015-5813
CVE-2015-5813 targets WebKit as used in Apple iOS prior to 9 and iTunes prior to 12.3, enabling remote code execution or a memory-corruption–based DoS via a crafted website. Public disclosures in the connected records show downstream patches: Mageia webkit2 updates (to 2.10.9), Fedora/openSUSE ad...
CVE-2015-5819
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...
CVE-2015-5813
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...
CVE-2015-5808
WebKit, as used in Apple iTunes before 12.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in...
CVE-2015-5801
CVE-2015-5801 concerns WebKit as used in Apple iOS before 9 and iTunes before 12.3. A crafted web site could cause remote code execution or a denial of service via memory corruption, leading to an application crash. The vulnerability is triggered through WebKit’s handling of web content, and is d...
CVE-2015-5801
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...
CVE-2015-5799
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...
CVE-2015-5802
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...
CVE-2015-5797
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...
CVE-2015-5812
CVE-2015-5812 affects WebKit as used in Apple iOS before 9 and iTunes before 12.3. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. The root cause is memory corruption within WebKit l...
CVE-2015-5818
CVE-2015-5818 affects WebKit used in Apple iOS before 9 and iTunes before 12.3. A crafted website can trigger a vulnerability that may allow remote code execution or cause a denial of service through memory corruption and application crashes. The provided documents do not specify the exact root c...
CVE-2015-5794
WebKit, as used in Apple iOS before 9 and iTunes before 12.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-09-16-1 and...