Apple Keynote, Pages, Numbers, iWork multiple security vulnerabilities

Restrictions bypass, memory corruptions...

Apple iWork Memory Corruption Vulnerability (CNVD-2015-06782)

Apple iWork is an office software suite for OS X and iOS operating systems. A security vulnerability exists in Apple iWork versions prior to 2.6, Apple Pages versions prior to 5.6, Apple Keynote versions prior to 6.6, and Apple Numbers versions prior to 3.6. A remote attacker could exploit this...

Apple iWork Memory Corruption Vulnerability (CNVD-2015-06781)

Apple iWork is an office software suite for OS X and iOS operating systems. A security vulnerability exists in Apple iWork versions prior to 2.6 and Apple Pages versions prior to 5.6. A remote attacker can exploit this vulnerability to execute arbitrary code or cause a denial of service memory...

Apple iWork Information Disclosure Vulnerability

Apple iWork is an office software suite for OS X and iOS operating systems. A security vulnerability exists in Apple iWork versions prior to 2.6, Apple Pages versions prior to 5.6, Apple Keynote versions prior to 6.6, and Apple Numbers versions prior to 3.6. A remote attacker could exploit this...

CVE-2015-7034

The Apple iWork application before 2.6 for iOS and Apple Pages before 5.6 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted Pages document...

CVE-2015-7033

The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers before 3.6 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted document...

CVE-2015-7032

The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers before 3.6 allow remote attackers to obtain sensitive information via a crafted document...

Memory corruption

The Apple iWork application before 2.6 for iOS and Apple Pages before 5.6 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted Pages document...

Information disclosure

The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers before 3.6 allow remote attackers to obtain sensitive information via a crafted document...

Memory corruption

The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers before 3.6 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted document...

CVE-2015-7032

CVE-2015-7032 affects Apple iWork suite: Keynote <6.6, Pages <5.6, Numbers <3.6, and iWork for iOS

CVE-2015-7033

CVE-2015-7033 affects Apple iWork suite: Keynote 6.6, Pages 5.6, Numbers 3.6, and iWork for iOS 2.6. Root cause is memory corruption due to parsing a maliciously crafted document, enabling remote arbitrary code execution or application crash. Apple’s advisory notes updates addressing the issue; r...

CVE-2015-7032

The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers before 3.6 allow remote attackers to obtain sensitive information via a crafted document...

CVE-2015-7034

The Apple iWork application before 2.6 for iOS and Apple Pages before 5.6 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted Pages document...

CVE-2015-7033

The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers before 3.6 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted document...

CVE-2015-7034

The CVE-2015-7034 entry applies to Apple iWork / Pages prior to versions: iOS iWork (2.6) and Pages (5.6) where parsing a crafted Pages document can trigger memory corruption, allowing remote code execution or a denial of service (application crash). The connected documents corroborate a memory‑c...

Apple Patches Keynote, Mozilla Patches Firefox

Apple on Thursday patched a handful of vulnerabilities in several iterations of its Keynote, Pages, Numbers and iWork productivity software. The most serious of the security flaws allow an attacker to execute code on a compromised OS X computer running Yosemite 10.10.4 or later, or iOS 8.4 or lat...

CVE-2015-1098

iWork in Apple iOS before 8.3 and Apple OS X before 10.10.3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted iWork file...

Memory corruption

iWork in Apple iOS before 8.3 and Apple OS X before 10.10.3 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted iWork file...

CVE-2015-1098

CVE-2015-1098 affects Apple iOS before 8.3 and OS X before 10.10.3, where processing crafted iWork files can lead to remote code execution or memory corruption causing a denial of service. In the provided documents, the vulnerability is tied to iWork file handling with memory corruption as the ro...