APPLE-SA-2014-06-30-3 iOS 7.1.2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-06-30-3 iOS 7.1.2 iOS 7.1.2 is now available and addresses the following: Certificate Trust Policy Available for: iPhone 4 and later, iPod touch 5th generation and later, iPad 2 and later Impact: Update to the certificate trust policy...

Ubuntu 14.04 LTS : Unity vulnerability (USN-2303-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2303-1 advisory. It was discovered that in certain circumstances Unity failed to successfully grab the keyboard when switching to the lock screen. A local attacker could possibly...

USN-2303-1: Unity vulnerability

It was discovered that in certain circumstances Unity failed to successfully grab the keyboard when switching to the lock screen. A local attacker could possibly use this issue to run commands, and unlock the current session...

USN-2303-1 unity vulnerability

It was discovered that in certain circumstances Unity failed to successfully grab the keyboard when switching to the lock screen. A local attacker could possibly use this issue to run commands, and unlock the current session...

PT-2014-6334

Name of the Vulnerable Software and Affected Versions Unity versions prior to 7.2.3 Unity versions 7.3.x prior to 7.3.1 Description The issue allows physically proximate attackers to bypass the lock screen by leveraging a machine that had text selected when locking or resuming from a suspension,...

July 2014 Apple security patches

Apple has issued a slew of security updates addressing a wide swath of vulnerabilities in its Safari Web browser, Mavericks desktop operating system, iOS mobile platform and content streaming AppleTV product. Apple doesn’t rate the severity of the vulnerabilities it fixes nor does it advise on...

CVE-2014-1352

Lock Screen in Apple iOS before 7.1.2 does not properly enforce the limit on failed passcode attempts, which makes it easier for physically proximate attackers to conduct brute-force passcode-guessing attacks via unspecified vectors...

CVE-2014-1351

Siri in Apple iOS before 7.1.2 allows physically proximate attackers to bypass an intended lock-screen passcode requirement, and read a contact list, via a Siri request that refers to a contact ambiguously...

CVE-2014-1353

Lock Screen in Apple iOS before 7.1.2 does not properly manage the telephony state in Airplane Mode, which allows physically proximate attackers to bypass the lock protection mechanism, and access a certain foreground application, via unspecified vectors...

Design/Logic Flaw

Lock Screen in Apple iOS before 7.1.2 does not properly manage the telephony state in Airplane Mode, which allows physically proximate attackers to bypass the lock protection mechanism, and access a certain foreground application, via unspecified vectors...

Code injection

Siri in Apple iOS before 7.1.2 allows physically proximate attackers to bypass an intended lock-screen passcode requirement, and read a contact list, via a Siri request that refers to a contact ambiguously...

Code injection

Lock Screen in Apple iOS before 7.1.2 does not properly enforce the limit on failed passcode attempts, which makes it easier for physically proximate attackers to conduct brute-force passcode-guessing attacks via unspecified vectors...

CVE-2014-1352

Lock Screen in Apple iOS before 7.1.2 does not properly enforce the limit on failed passcode attempts, which makes it easier for physically proximate attackers to conduct brute-force passcode-guessing attacks via unspecified vectors...

CVE-2014-1353

Lock Screen in Apple iOS before 7.1.2 does not properly manage the telephony state in Airplane Mode, which allows physically proximate attackers to bypass the lock protection mechanism, and access a certain foreground application, via unspecified vectors...

CVE-2014-1351

CVE-2014-1351 affects Apple iOS prior to 7.1.2. On the lock screen, a Siri request that references a contact ambiguously could cause Siri to display a contact list without the passcode, bypassing the lock-screen requirement and exposing contacts. Root cause: Siri on the lock screen can reveal the...

CVE-2014-1352

CVE-2014-1352 affects Apple iOS before 7.1.2. The vulnerability is in the Lock Screen, where the limit on failed passcode attempts was not properly enforced, enabling brute-force passcode-guessing attacks by a person with physical access. The issue is mitigated in Apple’s iOS 7.1.2 release, which...

CVE-2014-1353

CVE-2014-1353 is an Apple iOS lock-screen vulnerability affecting iOS versions prior to 7.1.2. The issue is a state management flaw in how telephony state is handled while Airplane Mode is active, allowing a physically proximate attacker to bypass the lock and access a foreground application. The...

CVE-2014-1351

Siri in Apple iOS before 7.1.2 allows physically proximate attackers to bypass an intended lock-screen passcode requirement, and read a contact list, via a Siri request that refers to a contact ambiguously...

Apple iOS 7.0.2 - Sim Lock Screen Display Bypass Vulnerability

No description provided by source...

PT-2014-4132

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1.2 Description The issue concerns the Lock Screen in Apple iOS, where it fails to properly enforce the limit on failed passcode attempts. This makes it easier for attackers with physical access to conduct...