Integer overflow

Integer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application...

Integer overflow

Integer underflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application...

Memory corruption

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other...

Null pointer dereference

The IOKit implementation in the kernel in Apple iOS before 7.1.2 and Apple TV before 6.1.2, and in IOReporting in Apple OS X before 10.9.4, allows local users to cause a denial of service NULL pointer dereference and reboot via crafted API arguments...

Memory corruption

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other...

CVE-2014-1366

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other...

UBUNTU-CVE-2014-1366

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other...

UBUNTU-CVE-2014-1325

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other...

CVE-2014-1383

Apple TV prior to 6.1.2 contains CVE-2014-1383 in the iTunes Store purchase flow, allowing remote authenticated users to bypass the password requirement for transactions. The underlying issue is insufficient authorization handling in the purchase flow, enabling potentially unauthorized purchases....

CVE-2014-1355

The IOKit implementation in the kernel in Apple iOS before 7.1.2 and Apple TV before 6.1.2, and in IOReporting in Apple OS X before 10.9.4, allows local users to cause a denial of service NULL pointer dereference and reboot via crafted API arguments...

CVE-2014-1358

CVE-2014-1358 concerns a heap/overflow condition in the Apple launchd component. The issue is described as an integer overflow in launchd’s handling of IPC messages, which could allow a crafted application to execute arbitrary code with system privileges. Affected products include iOS before 7.1....

CVE-2014-1358

Integer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application...

CVE-2014-1383

Apple TV before 6.1.2 allows remote authenticated users to bypass an intended password requirement for iTunes Store purchase transactions via unspecified vectors...

CVE-2014-1363

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other...

CVE-2014-1357

CVE-2014-1357: Heap overflow in launchd when handling log messages enables arbitrary code execution with system privileges on iOS <7.1.2, OS X <10.9.4, and Apple TV

CVE-2014-1325

Technical details about CVE-2014-1325 are not provided in the connected documents. Public specifics (affected products/versions/patches) are not disclosed here. Monitor for updates.

CVE-2014-1363

The CVE-2014-1363 issue involves WebKit as used in Apple software (iOS prior to 7.1.2; Safari prior to 6.1.5 and 7.x prior to 7.0.5; Apple TV prior to 6.1.2). The vulnerability affects the WebKit component and is triggered via a crafted web site, enabling remote attackers to execute arbitrary cod...

CVE-2014-1356

Heap-based buffer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application that sends IPC messages...

CVE-2014-1364

CVE-2014-1364 affects WebKit as used in Apple iOS up to 7.1.2, Safari up to 6.1.5 and 7.x up to 7.0.5, and Apple TV up to 6.1.2. A crafted web site can cause remote code execution or memory corruption leading to a crash (DoS). Root cause: memory corruption in WebKit. Exploitation is not detailed ...

CVE-2014-1356

CVE-2014-1356 is a heap buffer overflow in launchd’s handling of IPC messages that could allow arbitrary code execution with system privileges. Affected: iOS 7.1.2, OS X 10.9.4, and Apple TV 6.1.2. Root cause: improved bounds checking addressed the issue. Remediation: apply the corresponding Appl...