apple ios4.x 拒绝服务漏洞

利用IOS系统自带图片浏览器，浏览特定的图片时，会造成系统卡死，只能强制关机 ios4.x 厂商补丁： Apple ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.apple.com 下载 http://h4cker.us/0day.jpg 然后利用苹果的iTunes导入手机，用系统自带图片浏览器访问图片。...

CVE-2010-1824

Use-after-free vulnerability in WebKit, as used in Apple iTunes before 10.2 on Windows, Apple Safari, and Google Chrome before 6.0.472.59, allows remote attackers to execute arbitrary code or cause a denial of service via vectors related to SVG styles, the DOM tree, and error messages...

Design/Logic Flaw

Use-after-free vulnerability in WebKit, as used in Apple iTunes before 10.2 on Windows, Apple Safari, and Google Chrome before 6.0.472.59, allows remote attackers to execute arbitrary code or cause a denial of service via vectors related to SVG styles, the DOM tree, and error messages...

CVE-2010-1824

CVE-2010-1824 is a use-after-free vulnerability in WebKit used by Apple iTunes (Windows), Safari, and Chrome up to version 6.0.472.59. The flaw is triggered via SVG styles, the DOM tree, and error messages, allowing remote attackers to execute arbitrary code or cause a denial of service. The prov...

CVE-2010-1824

Removed by vendor...

CVE-2010-1824

Use-after-free vulnerability in WebKit, as used in Apple iTunes before 10.2 on Windows, Apple Safari, and Google Chrome before 6.0.472.59, allows remote attackers to execute arbitrary code or cause a denial of service via vectors related to SVG styles, the DOM tree, and error messages...

CVE-2010-1824

Use-after-free vulnerability in WebKit, as used in Apple iTunes before 10.2 on Windows, Apple Safari, and Google Chrome before 6.0.472.59, allows remote attackers to execute arbitrary code or cause a denial of service via vectors related to SVG styles, the DOM tree, and error messages...

UBUNTU-CVE-2010-1824

Use-after-free vulnerability in WebKit, as used in Apple iTunes before 10.2 on Windows, Apple Safari, and Google Chrome before 6.0.472.59, allows remote attackers to execute arbitrary code or cause a denial of service via vectors related to SVG styles, the DOM tree, and error messages...

New Survey Scams In Apple's iTunes Social Network

Spammers have been quick off the mark in exploiting Apple’s new iTunes social network to punt survey scams. Read the full article. The Register...

Apple Releases iTunes 10

Apple has released iTunes 10 to address multiple vulnerabilities affecting the WebKit package. These vulnerabilities may allow an attacker to execute arbitrary code or cause a denial-of-service condition. US-CERT encourages users and administrators to review Apple article HT4328 and apply any...

WebKit Flaws Haunt Apple iTunes

Apple has shipped a new version of its iTunes media player to fix 13 security flaws that cold be exploited to launch attacks against Windows machines. The patches in the new iTunes 10 covers vulnerabilities in WebKit, the open-source web browser engine. The WebKit vulnerabilities, already patched...

Apple Uses Security Advisory to Push iTunes 10 Upgrade

Social networking features, a rockin’ new logo and GUI improvements aren’t the only reason you should upgrade to iTunes 10, says Apple. The update to Apple’s popular music player software, released on Wednesday, also fixes a bunch of gaping vulnerabilities that could make earlier versions...

iTunes < 10.0 Multiple Vulnerabilities

Binary data 5653.prm...

Apple iTunes < 10.0 Multiple (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 10.0. Such versions are affected by numerous issues in the WebKit component. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid49086; scriptversion"1.13"; scriptcvsdate"Date: 2018/11/15...

Apple iTunes < 10.0 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes on the remote host is prior to version 10.0. It is, therefore, affected by multiple vulnerabilities in the WebKit component. Note that these only affect WebKit for Windows. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid49087;...

CVE-2010-1795

Untrusted search path vulnerability in Apple iTunes before 9.1, when running on Windows 7, Vista, and XP, allows local users and possibly remote attackers to gain privileges via a Trojan horse DLL in the current working directory...

CVE-2010-1768

Unspecified vulnerability in Apple iTunes before 9.1 allows local users to gain console privileges via vectors related to log files, "insecure file operation," and syncing an iPhone, iPad, or iPod touch...

Design/Logic Flaw

Untrusted search path vulnerability in Apple iTunes before 9.1, when running on Windows 7, Vista, and XP, allows local users and possibly remote attackers to gain privileges via a Trojan horse DLL in the current working directory...

Design/Logic Flaw

Unspecified vulnerability in Apple iTunes before 9.1 allows local users to gain console privileges via vectors related to log files, "insecure file operation," and syncing an iPhone, iPad, or iPod touch...

CVE-2010-1768

CVE-2010-1768 affects Apple iTunes prior to 9.1. It is caused by an insecure file operation in the handling of log files during syncing a mobile device (iPhone/iPad/iPod touch), allowing a local user to gain the privileges of the console user. The vulnerability is addressed by iTunes 9.1 with imp...