CVE-2010-1775

Race condition in Passcode Lock in Apple iOS before 4 on the iPhone and iPod touch allows physically proximate attackers to bypass intended passcode requirements, and pair a locked device with a computer and access arbitrary data, via vectors involving the initial boot...

CVE-2010-1751

Apple iOS before 4 (on iPhone and iPod touch) is affected by CVE-2010-1751 due to the Application Sandbox not preventing access to the photo library, which could allow remote attackers to obtain location information via unspecified vectors. The issue is described across multiple sources as a weak...

CVE-2010-1755: Undefined Security Weakness

Safari in Apple iOS before 4 on the iPhone and iPod touch does not properly implement the Accept Cookies preference, which makes it easier for remote web servers to track users via a cookie...

CVE-2010-1757: Undefined Security Weakness

WebKit in Apple iOS before 4 on the iPhone and iPod touch does not enforce the expected boundary restrictions on content display by an IFRAME element, which allows remote attackers to spoof the user interface via a crafted HTML document...

CVE-2010-1754: Undefined Security Weakness

Passcode Lock in Apple iOS before 4 on the iPhone and iPod touch does not properly handle alert-based unlocks in conjunction with subsequent Remote Lock operations through MobileMe, which allows physically proximate attackers to bypass intended passcode requirements via unspecified vectors...

CVE-2010-1775: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in Passcode Lock in Apple iOS before 4 on the iPhone and iPod touch allows physically proximate attackers to bypass intended passcode requirements, and pair a locked device with a computer and access arbitrary data, via vectors involving the initial boot...

CVE-2010-1753: Improper Restriction of Operations within the Bounds of a Memory Buffer

ImageIO in Apple iOS before 4 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted JPEG image...

CVE-2010-1752: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in CFNetwork in Apple iOS before 4 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors related to URL handling...

CVE-2010-1756: Undefined Security Weakness

The Settings application in Apple iOS before 4 on the iPhone and iPod touch does not properly report the wireless network that is in use, which might make it easier for remote attackers to trick users into communicating over an unintended network...

iphone/ipod discover the File Manager web service directory traversal vulnerability-vulnerability warning-the black bar safety net

from:Xeye Team discover is an iphone/ipod touch platform on the popular file Manager, can read pdf/office/txt format files And via wifi to share these files, a detailed description look at this: http://itunes.apple.com/us/app/discover/id292416855?mt=8 Vulnerability analysis When the wifi...

CVE-2010-2332

Impact Financials, Inc. Impact PDF Reader 2.0, 1.2, and other versions for iPhone and iPod touch allows remote attackers to cause a denial of service server crash via a "..." body in a POST request...

CVE-2010-2332

Technical details about CVE-2010-2332 are not publicly disclosed in the provided documents. Monitor for updates from official sources.

CVE-2010-1769

WebKit in Apple iTunes before 9.2 on Windows, and Apple iOS before 4 on the iPhone and iPod touch, accesses out-of-bounds memory during the handling of tables, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted HTML document, a...

Design/Logic Flaw

Use-after-free vulnerability in JavaScriptCore in WebKit in Apple iTunes before 9.2 on Windows, and Apple iOS before 4 on the iPhone and iPod touch, allows remote attackers to execute arbitrary code or cause a denial of service application crash via vectors related to page transitions, a differen...

CVE-2010-1769

Removed by vendor...

CVE-2010-1769

WebKit in Apple iTunes before 9.2 on Windows, and Apple iOS before 4 on the iPhone and iPod touch, accesses out-of-bounds memory during the handling of tables, which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted HTML document, a...

CVE-2010-2332: Improper Input Validation

Impact Financials, Inc. Impact PDF Reader 2.0, 1.2, and other versions for iPhone and iPod touch allows remote attackers to cause a denial of service server crash via a "..." body in a POST request...

QuickOffice v3.1.0 for iPhone/iPod Touch Malformed HTTP Method Remote DoS

No description provided by source. Exploit: QuickOffice v3.1.0 for iPhone/iPod Touch Malformed HTTP Method Remote DoS Author: Nishant Das Patnaik Website: http://nishantdaspatnaik.yolasite.com Software Link: http://itunes.apple.com/us/app/quickoffice-connect/id304673686?mt=8 Version: 3.1.0 Tested...

Impact PDF Reader 2.0 For iPhone/iPod Touch Denial Of Service

Exploit: Impact PDF Reader v2.0 for iPhone/iPod Touch POST Method Remote DoS Date: 14/06/2010 Author: Nishant Das Patnaik Website: http://nishantdaspatnaik.yolasite.com Software Link: N/A Version: 2.0, 1.2 Tested on: iPod 2G with iOS v3.1.3 Note: Impact PDF Reader v2.0 and prior program versions...

QuickOffice 3.1.0 For iPhone/iPod Touch Denial Of Service

Exploit: QuickOffice v3.1.0 for iPhone/iPod Touch Malformed HTTP Method Remote DoS Date: 14/06/2010 Author: Nishant Das Patnaik Website: http://nishantdaspatnaik.yolasite.com Software Link: http://itunes.apple.com/us/app/quickoffice-connect/id304673686?mt=8 Version: 3.1.0 Tested on: iPod 2G with...