Memory corruption

WebKit, as used in Apple iOS before 8.1.1 and Apple TV before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-4452...

Code injection

The kernel in Apple iOS before 8.1.1 and Apple TV before 7.0.2 does not properly validate IOSharedDataQueue object metadata, which allows attackers to execute arbitrary code in a privileged context via a crafted application...

Memory corruption

WebKit, as used in Apple iOS before 8.1.1 and Apple TV before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-4462...

CVE-2014-4452

CVE-2014-4452 affects WebKit used in Apple iOS prior to 8.1.1 and Apple TV prior to 7.0.2. The vulnerability allows a remote attacker to execute arbitrary code or cause a denial of service (via memory corruption) through a crafted web site. The root cause is memory corruption in WebKit referenced...

CVE-2014-4462

CVE-2014-4462 affects WebKit used in Apple iOS before 8.1.1 and Apple TV before 7.0.2. The flaw allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, due to memory corruption and an application crash. It is a separate vulnerability from CVE-2014-44...

CVE-2014-4461

CVE-2014-4461 affects Apple iOS (pre-8.1.1) and Apple TV (pre-7.0.2). The root cause is a validation/handling defect in IOSharedDataQueue metadata within IODataQueue objects, enabling a crafted app to run arbitrary code in kernel/sys privileges. The linked Project Zero write‑up (Deja-XNU) explain...

CVE-2014-4455

CVE-2014-4455 concerns a Mach-O segment overlap handling bug in dyld (iOS before 8.1.1 and Apple TV before 7.0.2) that lets a local user bypass code-signing restrictions via a crafted file. The root cause is improper validation of overlapping Mach-O segments, enabling unsigned code execution. The...

CVE-2014-4461

The kernel in Apple iOS before 8.1.1 and Apple TV before 7.0.2 does not properly validate IOSharedDataQueue object metadata, which allows attackers to execute arbitrary code in a privileged context via a crafted application...

CVE-2014-4462

WebKit, as used in Apple iOS before 8.1.1 and Apple TV before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-4452...

Apple Releases Security Updates for iOS, OS X Yosemite, and Apple TV

Apple released security updates for iOS devices, OS X Yosemite and Apple TV to address multiple vulnerabilities, one of which could allow remote attackers to execute arbitrary commands. Updates available include: iOS 8.1.1 for iPhone 4s and later, iPod touch 5th generation and later, and iPad 2 a...

Apple TV < 7.0.1 Multiple Vulnerabilities (POODLE)

According to its banner, the remote Apple TV device is a version prior to 7.0.1. It is, therefore, affected by the following vulnerabilities : - An error exists related to the way SSL 3.0 handles padding bytes when decrypting messages encrypted using block ciphers in cipher block chaining CBC mod...

Multiple Trendnet TV-IP Cams Command Injection Vulnerability

Multiple Trendnet TV-IP Cams are prone to a command-injection vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apple TV security vulnerabilities

Unauthorized bluetooth pairing, SSL poodle attack...

APPLE-SA-2014-10-20-2 Apple TV 7.0.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-10-20-2 Apple TV 7.0.1 Apple TV 7.0.1 is now available and addresses the following: Apple TV Available for: Apple TV 3rd generation and later Impact: A malicious Bluetooth input device may bypass pairing Description: Unencrypted...

Code injection

The GR8! TV aka com.magzter.greighttv application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7682

CVE-2014-7682 concerns the GR8! TV Android app (com.magzter.greighttv), version 3.0, which does not verify X.509 certificates from SSL servers. This flaw allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Affected software is the GR8! T...

CVE-2014-7682

The GR8! TV aka com.magzter.greighttv application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Apple TV < 7.0.1 Multiple Vulnerabilities

Binary data 8562.prm...

Apple Releases Security Updates for iOS and Apple TV

Apple has released security updates for iOS devices and Apple TV to address multiple vulnerabilities, one of which could allow an attacker to decrypt data protected by SSL. Updates available include: iOS 8.1 for iPhone 4s and later, iPod touch 5th generation and later, and iPad 2 and later Apple ...

CVE-2014-7466

The Live TV Browser aka com.wHDSmartBrowser application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...