CVE-2014-4414

WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-09-17-1 and...

CVE-2014-4410

WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-09-17-1 and...

Heap overflow

Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted key-mapping properties...

UBUNTU-CVE-2014-4414

WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-09-17-1 and...

Design/Logic Flaw

syslogd in the syslog subsystem in Apple iOS before 8 and Apple TV before 7 allows local users to change the permissions of arbitrary files via a symlink attack on an unspecified file...

UBUNTU-CVE-2014-4415

WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-09-17-1 and...

CVE-2014-4379

CVE-2014-4379 affects IOHIDFamily in Apple iOS (pre-8) and Apple TV (pre-7). The issue is an out-of-bounds read in IOHIDFamily’s handling of a function, allowing a local attacker to read kernel pointers and bypass ASLR. Apple’s remediation is included in iOS 8 and TV OS 7 updates (vendor patch ev...

CVE-2014-4371

CVE-2014-4371 affects Apple's mobile OS and TV devices via an uninitialized memory issue in the kernel’s network statistics interface, enabling disclosure of memory content and layout information through a crafted app. Descriptions in connected documents confirm the same memory-init root cause an...

CVE-2014-4404

Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted key-mapping properties...

CVE-2014-4412

WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-09-17-1 and...

CVE-2014-4421

The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-content and memory-layout information via a crafted application, a different vulnerability than CVE-2014-4371,...

CVE-2014-4410

WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-09-17-1 and...

CVE-2014-4383

CVE-2014-4383 affects the Assets subsystem in Apple iOS (pre-8) and Apple TV (pre-7), where an attacker in a network position can spoof a device’s update status by crafting Last-Modified HTTP response headers, enabling MITM-style deception of update checks. The issue is addressed in iOS 8 and App...

CVE-2014-4372

CVE-2014-4372 affects Apple iOS before 8 and Apple TV before 7. The vulnerability lies in syslogd in the syslog subsystem, where a local attacker can cause symlink-based file permission changes. The GTISC/Apple TV NASL plugin corroborates the issue as a local-symlink permission escalation within ...

CVE-2014-4378

CoreGraphics in Apple iOS before 8 and Apple TV before 7 allows remote attackers to obtain sensitive information or cause a denial of service out-of-bounds read and application crash via a crafted PDF document...

CVE-2014-4422

CVE-2014-4422 concerns the Apple kernel hardening RNG used early in the boot process. The connected sources confirm that the issue allowed some RNG output to be inferable by user space, enabling bypass of kernel-hardening protections. A fix was applied by replacing the early-boot RNG with a crypt...

CVE-2014-4377

CVE-2014-4377 affects Apple iOS prior to 8 and Apple TV prior to 7. It is a CoreGraphics memory corruption in PDF handling: specifically an integer overflow in the Indexed color space processing of PDFs that can trigger a heap overflow via a controlled allocation path (x_calloc) and a follow-on m...

CVE-2014-4420

The CVE-2014-4420 entry describes a kernel memory initialization flaw in the network-statistics interface of Apple iOS (pre-8) and Apple TV (pre-7). A crafted application could leak memory contents and layout information from the kernel, similarly to other CVEs in the bundle. The root cause is me...

CVE-2014-4357

Accounts Framework in Apple iOS before 8 and Apple TV before 7 allows attackers to obtain sensitive information by reading log data that was not intended to be present in a log...

CVE-2014-4414

CVE-2014-4414 affects WebKit as used in Apple iOS before 8 and Apple TV before 7. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website due to memory corruption in WebKit. This is a WebKit-specific issue distinct from other WebKit C...