CVE-2008-4230

The CVE-2008-4230 family describes a vulnerability in Apple iPhone OS 1.0–2.1 and iPhone OS for iPod touch 1.1–2.1 where the Passcode Lock allows SMS content to be visible while the emergency-call screen is shown. The underlying issue is the display of SMS messages on the device screen when the e...

CVE-2008-4229

CVE-2008-4229 describes a race condition in the Passcode Lock feature affecting Apple iPhone OS 2.0–2.1 and iPhone OS for iPod touch 2.0–2.1, enabling physically proximate attackers to bypass the lock and launch arbitrary applications by restoring the device from a backup. The issue is tied to th...

PT-2008-5521 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: Apple iPhone OS versions 1.0 through 2.1 Apple iPhone OS for iPod touch versions 1.1 through 2.1 Description: The issue allows physically proximate attackers to make a phone call to an arbitrary number by leveraging the emergency-call ability...

PT-2008-5520 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: Apple iPhone OS versions 1.0 through 2.1 Apple iPhone OS for iPod touch versions 1.1 through 2.1 Description: The issue concerns a change in the encryption level of PPTP VPN connections, which is lowered to a level that makes it easier for...

PT-2008-5524 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: Safari versions 1.0 through 2.1 in Apple iPhone OS Safari versions 1.1 through 2.1 in iPhone OS for iPod touch Description: The issue is related to the improper handling of HTML TABLE elements, which can be exploited by remote attackers to...

PT-2008-5523 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: Apple iPhone OS versions 1.0 through 2.1 iPhone OS for iPod touch versions 1.1 through 2.1 Description: The Passcode Lock feature displays SMS messages when the emergency-call screen is visible. This allows physically proximate attackers to...

CVE-2008-3623

The CVE-2008-3623 entry describes a heap-based buffer overflow in CoreGraphics affecting Apple Safari before 3.2 on Windows and in iPhone OS 1.0–2.2.1 (and iPod touch 1.1–2.2.1). The vulnerability arises from improper handling of color spaces in image parsing, enabling remote attackers to execute...

多个产品库MP4文件远程拒绝服务漏洞

BUGTRAQ ID: 31957 CNCAN ID：CNCAN-2008102904 多个电话和音频产品使用的库在处理畸形MP4文件时存在问题，可导致应用程序崩溃。 这些产品包括： Apple iPhone Apple iPod touch VideoLan VLC 目前没有详细漏洞细节提供。其他产品也可能受此漏洞影响。 VideoLAN VLC media player 0.9.4 VideoLAN VLC media player 0.9.3 VideoLAN VLC media player 0.9.2 VideoLAN VLC media player 0.9.1 VideoL...

CVE-2008-3950

Off-by-one error in the webdrawInRect:withFont:ellipsis:alignment:measureOnly function in WebKit in Safari in Apple iPhone 1.1.4 and 2.0 and iPod touch 1.1.4 and 2.0 allows remote attackers to cause a denial of service browser crash via a JavaScript alert call with an argument that lacks breakabl...

Design/Logic Flaw

Off-by-one error in the webdrawInRect:withFont:ellipsis:alignment:measureOnly function in WebKit in Safari in Apple iPhone 1.1.4 and 2.0 and iPod touch 1.1.4 and 2.0 allows remote attackers to cause a denial of service browser crash via a JavaScript alert call with an argument that lacks breakabl...

CVE-2008-3950

Off-by-one error in the webdrawInRect:withFont:ellipsis:alignment:measureOnly function in WebKit in Safari in Apple iPhone 1.1.4 and 2.0 and iPod touch 1.1.4 and 2.0 allows remote attackers to cause a denial of service browser crash via a JavaScript alert call with an argument that lacks breakabl...

CVE-2008-3950

The CVE is based on a real DoS vulnerability in WebKit used by Safari on iPhone/iPod touch (versions 1.1.4 and 2.0). The issue is an off-by-one in _web_drawInRect:withFont:ellipsis:alignment:measureOnly: triggered by a crafted alert() string with a length that is a multiple of the 4096-byte memor...

CORE-2008-0126: iPhone Safari JavaScript alert Denial of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ iPhone Safari JavaScript alert Denial of Service 1. Advisory Information Title: iPhone Safari JavaScript alert Denial of Service Advisory ID: CORE-2008-0603 Advisory...

Apple iOS 1.1.4/2.0 / iPod 1.1.4/2.0 touch Safari WebKit - 'alert()' Remote Denial of Service

source: https://www.securityfocus.com/bid/31061/info Apple iPhone and iPod touch are prone to a remote denial-of-service vulnerability that occurs in the WebKit library used by the Safari browser. Remote attackers can exploit this issue to crash the affected browser installed on the devices,...

Apple iOS 1.1.42.0 iPod 1.1.42.0 touch Safari WebKit - alert() Remote Denial of Service

Apple iOS 1.1.42.0 iPod 1.1.42.0 touch Safari WebKit - alert Remote Denial of Service source: https://www.securityfocus.com/bid/31061/info Apple iPhone and iPod touch are prone to a remote denial-of-service vulnerability that occurs in the WebKit library used by the Safari browser. Remote attacke...

CVE-2008-3632

Use-after-free vulnerability in WebKit in Apple iPod touch 1.1 through 2.0.2, and iPhone 1.0 through 2.0.2, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a web page with crafted Cascading Style Sheets CSS import statements...

CVE-2008-3631

Application Sandbox in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, does not properly isolate third-party applications, which allows attackers to read arbitrary files in a third-party application's sandbox via a different third-party application...

Code injection

Application Sandbox in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, does not properly isolate third-party applications, which allows attackers to read arbitrary files in a third-party application's sandbox via a different third-party application...

Design/Logic Flaw

Use-after-free vulnerability in WebKit in Apple iPod touch 1.1 through 2.0.2, and iPhone 1.0 through 2.0.2, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a web page with crafted Cascading Style Sheets CSS import statements...

Design/Logic Flaw

The Networking subsystem in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, uses predictable TCP initial sequence numbers, which allows remote attackers to spoof or hijack a TCP connection...