1702 matches found
CVE-2009-1690
Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome 1.0.154.53, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service memory...
CVE-2009-1693
WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to read images from arbitrary web sites via a CANVAS element with an SVG image, related to a "cross-site image capture issue."...
CVE-2009-1685
CVE-2009-1685 is a documented XSS vulnerability in WebKit used by Apple Safari prior to 4.0 and by iOS webviews (iPhone OS 1.0–2.2.1). The root cause, as described in authoritative sources, is that overwriting the document.implementation property of either an embedded document or a parent documen...
CVE-2009-1690
Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome 1.0.154.53, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service memory...
CVE-2009-1702: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to improper handling of Location and History objects...
CVE-2009-1698
WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not initialize a pointer during handling of a Cascading Style Sheets CSS attr function call with a large numerical argument, which allows remote attackers to execute arbitrary code ...
CVE-2009-0945
CVE-2009-0945 is a memory-corruption vulnerability caused by an array index error in WebKit’s insertItemBefore for SVG data structures. The issue allows remote code execution via documents containing a negative index in SVGList structures (SVGTransformList, SVGStringList, SVGNumberList, SVGPathSe...
CVE-2009-0945
Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome Stable before 1.0.154.65, and possibly other products allows remote attackers to execute...
CVE-2009-0153
International Components for Unicode ICU 4.0, 3.6, and other 3.x versions, as used in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Fedora 9 and 10, and possibly other operating systems, does not properly handle invalid byte sequences...
Integer overflow
Integer underflow in CoreGraphics in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PDF file that triggers a heap-based...
CVE-2009-0153
International Components for Unicode ICU 4.0, 3.6, and other 3.x versions, as used in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Fedora 9 and 10, and possibly other operating systems, does not properly handle invalid byte sequences...
CVE-2009-0153
International Components for Unicode ICU 4.0, 3.6, and other 3.x versions, as used in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Fedora 9 and 10, and possibly other operating systems, does not properly handle invalid byte sequences...
CVE-2009-0145
CVE-2009-0145 affects CoreGraphics in Apple Mac OS X 10.4.11 and 10.5 up to before 10.5.7, iPhone OS 1.0–2.2.1, and iPhone OS for iPod touch 1.1–2.2.1. A crafted PDF file can trigger memory corruption, allowing remote arbitrary code execution or an application crash (denial of service). The issue...
CVE-2009-0945
Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome Stable before 1.0.154.65, and possibly other products allows remote attackers to execute...
Code injection
HTC Touch Pro and HTC Touch Cruise vCard allows remote attackers to cause denial of service CPU consumption, SMS consumption, and connectivity loss via a flood of vCards to UDP port 9204...
CVE-2008-6775
The CVE-2008-6775 entry affects HTC Touch Pro and HTC Touch Cruise devices via a vulnerability in processing vCards. A flood of vCards sent to UDP port 9204 can cause CPU and SMS resource consumption, leading to connectivity loss and denial of service. The described impact is a network-based DoS;...
CVE-2008-6775
HTC Touch Pro and HTC Touch Cruise vCard allows remote attackers to cause denial of service CPU consumption, SMS consumption, and connectivity loss via a flood of vCards to UDP port 9204...
CVE-2008-6775: Undefined Security Weakness
HTC Touch Pro and HTC Touch Cruise vCard allows remote attackers to cause denial of service CPU consumption, SMS consumption, and connectivity loss via a flood of vCards to UDP port 9204...
HTC Touch vCard over IP Denial of Service Exploit
No description provided by source. ! /usr/bin/env python Copyright c 2009 Mobile Security Lab www.mseclab.com Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files the "Software", to deal in the Software without restrictio...
