Apple iOS/Safari Information Disclosure Vulnerability

Apple iOS is Apple's operating system for several smart devices.Apple Safari is an American Apple web browser that is the default browser that comes with the Mac OS X and iOS operating systems. The page load implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1 fails to properly...

The vulnerability of Safari browser and iOS operating system allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit component in the Safari browser and the iOS operating system is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption through a specially crafted web page...

The vulnerabilities in operating systems such as Mac OS X and iOS allow attackers to trigger service failures or execute arbitrary code.

The vulnerability of the OpenGL component in Mac OS X and iOS operating systems arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or cause a service failure memory corruption by using a specially crafted web page...

Apple iOS dyld arbitrary code execution vulnerability (CNVD-2015-08185)

Apple iOS is an operating system developed by Apple for use in cell phones and more. A segment checksum vulnerability exists in the Apple iOS dyld handling, which allows an attacker to exploit the vulnerability to execute arbitrary code with system privileges...

Apple iOS/OS X FontParser Memory Corruption Vulnerability (CNVD-2015-07112)

OS X formerly Mac OS X is the latest version of Apple's proprietary operating system for the Macintosh computer. iOS is an operating system developed by Apple for mobile devices. A security vulnerability exists in FontParser in Apple iOS versions prior to 9.1 and Apple OS X versions prior to...

Apple iOS Denial of Service Vulnerability (CNVD-2015-07148)

Apple iOS is an operating system for handheld devices developed by Apple Inc. A denial of service vulnerability exists in Apple iOS versions prior to 9.1 and OS X versions prior to 10.11.1. It allows remote attackers to execute arbitrary code or launch denial-of-service attacks via crafted font...

Apple iOS/OS X OpenGL Memory Corruption Vulnerability

OS X formerly Mac OS X is the latest version of Apple's proprietary operating system for the Macintosh computer. iOS is an operating system developed by Apple for mobile devices. A security vulnerability exists in the OpenGL implementation in Apple iOS versions prior to 9.1 and Apple OS X version...

The vulnerability of the multi-media player iTunes, allowing a intruder to execute arbitrary code or trigger a service failure

The vulnerability of the WebKit component in the multimedia player iTunes and the iOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially crafted...

The vulnerability of the iOS operating system, which allows a perpetrator to increase their privileges or cause service failures

The vulnerability of the iOS operating system’s kernel is caused by a buffer overflow. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service failures...

Apple iOS Webkit Memory Corruption Vulnerability (CNVD-2015-06160)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in Webkit used by Apple iOS, which allows attackers to construct a malicious web page and trick users into parsing it, which could crash the application or execute...

Apple iOS XPC Message Handling Memory Corruption Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability in the handling of special XPC messages in Apple iOS allows remote attackers to exploit the vulnerability to submit special messages to execute arbitrary code...

Apple iOS Backup Symbolic Link Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A symbolic link vulnerability exists in Apple iOS Backup, which allows malicious applications to exploit the vulnerability to access protected portions of the file system...

Apple iOS IOAcceleratorFamily Kernel Memory Leak Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS IOAcceleratorFamily has a sensitive kernel memory leak that allows local attackers to exploit the vulnerability to obtain sensitive information...

Dealing with FREAK and SuperFish

Security Dealing with FREAK and SuperFish Share March 10th, 2015 The FREAK TLS attack Following the trend of memorable names for TLS attacks, FREAK was recently announced. This exploits a bug in some TLS libraries, combined with the support of ancient weak ciphers, to enable a MitM to force...

Apple iOS v8.x - Message Context & Privacy Vulnerability

Document Title: =============== Apple iOS v8.x - Message Context & Privacy Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1346 Video: http://www.vulnerability-lab.com/getcontent.php?id=1350 Release Date: ============= 2014-12-16...

Apple iOS v7.1.2 - Merge Apps Service Local Bypass Vulnerability

Document Title: =============== Apple iOS v7.1.2 - Merge Apps Service Local Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1280 Video: http://www.vulnerability-lab.com/getcontent.php?id=1281 Vulnerability Magazine:...

Harnessing the Power of an Android Cluster for Security Research

When the topic of mobile security comes up, users and researchers often discuss Android as if it’s one monolithic operating system like iOS is. But the fact is that there are nearly as many versions of Android as there are Android devices, which has led to plenty of confusion when it’s time to fi...

Android Outlook App Could Expose Emails, Attachments

There are two issues with the way Microsoft’s Outlook application encrypts content on older versions of Android that could expose users’ emails and email attachments. Paolo Soto, a researcher with the security firm Include Security, said his team initially dug up the vulnerabilities in November...

Apple iOS 7.2 - Sim Lock Screen Display Bypass Vulnerability

Document Title: =============== Apple iOS 7.2 - Sim Lock Screen Display Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1105 Video: http://www.vulnerability-lab.com/getcontent.php?id=1104 Release Date: ============= 2013-10-04...

First ever Malware for Firefox Mobile OS developed by Researcher

Firefox OS is a mobile operating system based on Linux and Mozilla's Gecko technology, whose environment is dedicated to apps created with just HTML, CSS, and JavaScript. After almost two years of development, a few months back Mozilla officially launched their Firefox OS devices in stores and no...