Apple iOS Safari - Remote Denial of Service

Exploit Title: Remote DoS on Safari for iPhone & iPod Touch Date: 26/03/2010 Author: Nishant Das Patnaik For more of Nishant's research, please visit: http://nishantdaspatnaik.yolasite.com/research.php Tested on: iPod Touch 3G iPhone OS 3.1.3 Description: An attacker may direct the user to visit ...

CVE-2010-1029

Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Safari on iPhone OS and iPhone OS for iPod touch, and Google Chrome 4.0.249, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary co...

Stack overflow

Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Safari on iPhone OS and iPhone OS for iPod touch, and Google Chrome 4.0.249, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary co...

iPhone / iTouch FTPDisc 1.0 3 ExploitsInOne Buffer Overflow DoS

No description provided by source. Title - iPhone / iTouch FTPDisc 1.0 3ExploitsInOne BuffOverflow DoS Model - Tested on iPod Touch 3G 3.1.3 Software - FTPDisc 1.0 and FTPDisc 1.0 Lite http://itunes.apple.com/es/app/ftpdisc-lite-pdf-reader/id329157971?mt=8 Attacker - Tested from GNU/Linux Sidux,...

iPhone / iTouch FTPDisc 1.0 Buffer Overflow

Title - iPhone / iTouch FTPDisc 1.0 3ExploitsInOne BuffOverflow DoS Model - Tested on iPod Touch 3G 3.1.3 Software - FTPDisc 1.0 and FTPDisc 1.0 Lite http://itunes.apple.com/es/app/ftpdisc-lite-pdf-reader/id329157971?mt=8 Attacker - Tested from GNU/Linux Sidux, fuzzing with a future PenTBox versi...

iPhone / iTouch FtpDisc 1.0 - Buffer Overflow (Denial of Service) (PoC)

Title - iPhone / iTouch FTPDisc 1.0 3ExploitsInOne BuffOverflow DoS Model - Tested on iPod Touch 3G 3.1.3 Software - FTPDisc 1.0 and FTPDisc 1.0 Lite http://itunes.apple.com/es/app/ftpdisc-lite-pdf-reader/id329157971?mt=8 Attacker - Tested from GNU/Linux Sidux, fuzzing with a future PenTBox versi...

Apple iPhone OS USB控制消息信息泄露漏洞

BUGTRAQ ID: 38040 CVE ID: CVE-2010-0038 iPhone OS是苹果iPhone智能手机和iPod touch播放器所使用的操作系统。 在处理某些USB控制消息时存在内存破坏漏洞，能够物理访问设备的用户可以绕过通行码验证访问用户数据。 Apple iPhone OS 1.1 - 3.1.2 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.apple.com...

Apple Releases iPhone OS 3.1.3 and iPhone OS 3.1.3 for iPod touch

Apple has released iPhone OS 3.1.3 and iPhone OS 3.1.3 for iPod touch to address vulnerabilities in the CoreAudio, ImageIO, Recovery Mode and WebKit packages. Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code, cause a denial-of-service condition, or obtain...

CVE-2010-0038

Recovery Mode in Apple iPhone OS 1.0 through 3.1.2, and iPhone OS for iPod touch 1.1 through 3.1.2, allows physically proximate attackers to bypass device locking, and read or modify arbitrary data, via a USB control message that triggers memory corruption...

CVE-2010-0038

Recovery Mode in Apple iPhone OS 1.0 through 3.1.2, and iPhone OS for iPod touch 1.1 through 3.1.2, allows physically proximate attackers to bypass device locking, and read or modify arbitrary data, via a USB control message that triggers memory corruption...

CVE-2010-0496

CVE-2010-0496 affects FreeBit ServersMan 3.1.5 on Apple iPhone OS 3.1.2 and iPhone OS for iPod touch. The vulnerability allows a remote attacker to cause a denial of service (daemon crash) by sending a HEAD request to the root URI ( / ). The public description specifies a network-accessible trigg...

CVE-2009-3273

iPhone Mail in Apple iPhone OS, and iPhone OS for iPod touch, does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL e-mail servers via a crafted certificate...

iPhone, QuickTime Bitten by Serious Security Bugs

Apple has released security patches to cover serious security vulnerabilities in its iPhone, iPod Touch and QuickTime products. The most serious of the vulnerabilities could lead to remote code execution attacks that give malicious hackers an easy way to hijack computers and mobile devices. Read...

CVE-2009-2794

The Exchange Support component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, does not properly implement the "Maximum inactivity time lock" functionality, which allows local users to bypass intended Microsoft Exchange restrictions by choosing a large Require Passcode...

CVE-2009-2796

The UIKit component in Apple iPhone OS 3.0, and iPhone OS 3.0.1 for iPod touch, allows physically proximate attackers to discover a password by watching a user undo deletions of characters in the password...

CVE-2009-2797

The WebKit component in Safari in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, does not remove usernames and passwords from URLs sent in Referer headers, which allows remote attackers to obtain sensitive information by reading Referer logs on a web server...

CVE-2009-2207

The MobileMail component in Apple iPhone OS 3.0 and 3.0.1, and iPhone OS 3.0 for iPod touch, lists deleted e-mail messages in Spotlight search results, which might allow local users to obtain sensitive information by reading these messages...

CVE-2009-2797

The WebKit component in Safari in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, does not remove usernames and passwords from URLs sent in Referer headers, which allows remote attackers to obtain sensitive information by reading Referer logs on a web server...

CVE-2009-2207

The CVE-2009-2207 entry concerns the MobileMail component in Apple iPhone OS 3.0/3.0.1 (and iPhone OS 3.0 for iPod touch). The issue is that Spotlight search results may list deleted e-mail messages, allowing local users to read sensitive messages. The available documents confirm the affected pla...

PT-2009-4655 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: Apple iPhone OS versions prior to 3.1 Apple iPhone OS versions prior to 3.1.1 for iPod touch Description: The issue is related to multiple heap-based buffer overflows in the AudioCodecs library within the CoreAudio component. This can be...