Iphone Os@5.1 Security Vulnerabilities and Issues — Iphone Os@5.1 CVE List

Lucene search

AppleIphone Os5.1

66 matches found

CVE•added 2013/09/19 10:27 a.m.•112 views

CVE-2013-1047

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2.

6.8CVSS7.8AI score0.02313EPSS

CVE•added 2013/09/19 10:27 a.m.•83 views

CVE-2011-2391

The IPv6 implementation in the kernel in Apple iOS before 7 allows remote attackers to cause a denial of service (CPU consumption) via crafted ICMPv6 packets.

6.1CVSS4.1AI score0.01129EPSS

CVE•added 2013/05/22 1:29 p.m.•72 views

CVE-2013-2842

Use-after-free vulnerability in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of widgets.

7.5CVSS6.9AI score0.21099EPSS

CVE•added 2013/09/19 10:27 a.m.•69 views

CVE-2013-1041

6.8CVSS7.8AI score0.02313EPSS

CVE•added 2013/09/19 10:27 a.m.•62 views

CVE-2013-1038

6.8CVSS7.8AI score0.02313EPSS

CVE•added 2013/09/19 10:27 a.m.•57 views

CVE-2013-1040

6.8CVSS7.8AI score0.02313EPSS

CVE•added 2013/03/20 2:55 p.m.•56 views

CVE-2013-0977

dyld in Apple iOS before 6.1.3 and Apple TV before 5.2.1 does not properly manage the state of file loading for Mach-O executable files, which allows local users to bypass intended code-signing requirements via a file that contains overlapping segments.

4.6CVSS5.5AI score0.00059EPSS

CVE•added 2013/09/19 10:27 a.m.•56 views

CVE-2013-1039

6.8CVSS7.8AI score0.02313EPSS

CVE•added 2013/03/20 2:55 p.m.•55 views

CVE-2013-0981

The IOUSBDeviceFamily driver in the USB implementation in the kernel in Apple iOS before 6.1.3 and Apple TV before 5.2.1 accesses pipe object pointers that originated in userspace, which allows local users to gain privileges via crafted code.

7.2CVSS5.7AI score0.00045EPSS

CVE•added 2013/05/20 2:44 p.m.•55 views

CVE-2013-0999

WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-0...

9.3CVSS7.5AI score0.01302EPSS

CVE•added 2013/09/19 10:27 a.m.•55 views

CVE-2013-1036

Safari in Apple iOS before 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document.

6.8CVSS7.5AI score0.02238EPSS

CVE•added 2013/03/20 2:55 p.m.•54 views

CVE-2013-0978

The ARM prefetch abort handler in the kernel in Apple iOS before 6.1.3 and Apple TV before 5.2.1 does not ensure that it has been invoked in an abort context, which makes it easier for local users to bypass the ASLR protection mechanism via crafted code.

2.1CVSS5.5AI score0.00061EPSS

CVE•added 2013/05/20 2:44 p.m.•53 views

CVE-2013-1003

9.3CVSS7.5AI score0.01302EPSS

CVE•added 2013/05/24 4:43 p.m.•53 views

CVE-2013-1019

Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with Sorenson encoding.

9.3CVSS7.7AI score0.04963EPSS

CVE•added 2013/09/19 10:27 a.m.•53 views

CVE-2013-1037

6.8CVSS7.8AI score0.02313EPSS

CVE•added 2013/05/20 2:44 p.m.•52 views

CVE-2013-1001

9.3CVSS7.5AI score0.01302EPSS

CVE•added 2013/09/19 10:28 a.m.•52 views

CVE-2013-5142

The kernel in Apple iOS before 7 does not initialize unspecified kernel data structures, which allows local users to obtain sensitive information from kernel stack memory via the (1) msgctl API or (2) segctl API.

4.9CVSS4.9AI score0.00142EPSS

CVE•added 2013/05/20 2:44 p.m.•51 views

CVE-2013-1004

9.3CVSS7.5AI score0.01302EPSS

CVE•added 2013/05/20 2:44 p.m.•51 views

CVE-2013-1005

9.3CVSS7.5AI score0.01302EPSS

CVE•added 2013/09/19 10:27 a.m.•51 views

CVE-2013-5125

6.8CVSS7.8AI score0.01866EPSS

CVE•added 2013/05/20 2:44 p.m.•50 views

CVE-2013-1002

9.3CVSS7.5AI score0.01302EPSS

CVE•added 2013/05/20 2:44 p.m.•50 views

CVE-2013-1008

9.3CVSS7.5AI score0.01302EPSS

CVE•added 2013/09/16 1:2 p.m.•50 views

CVE-2013-1025

Buffer overflow in CoreGraphics in Apple Mac OS X before 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted JBIG2 data in a PDF document.

6.8CVSS7.8AI score0.01133EPSS

CVE•added 2013/09/19 10:28 a.m.•49 views

CVE-2013-5156

The Telephony subsystem in Apple iOS before 7 does not require API conformity for access to telephony-daemon interfaces, which allows attackers to bypass intended restrictions on phone calls via a crafted app that sends direct requests to the daemon.

4.3CVSS5.6AI score0.003EPSS

CVE•added 2013/03/20 2:55 p.m.•48 views

CVE-2013-0979

lockdownd in Lockdown in Apple iOS before 6.1.3 does not properly consider file types during the permission-setting step of a backup restoration, which allows local users to change the permissions of arbitrary files via a backup that contains a pathname with a symlink.

1.9CVSS5.7AI score0.00036EPSS

CVE•added 2013/03/20 2:55 p.m.•48 views

CVE-2013-0980

The Passcode Lock implementation in Apple iOS before 6.1.3 does not properly manage the lock state, which allows physically proximate attackers to bypass an intended passcode requirement by leveraging an error in the emergency-call feature.

2.1CVSS5.6AI score0.00053EPSS

CVE•added 2013/06/05 2:39 p.m.•48 views

CVE-2013-3953

The mach_port_space_info function in osfmk/ipc/mach_debug.c in the XNU kernel in Apple Mac OS X 10.8.x does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel heap memory via a crafted call.

4.9CVSS4.9AI score0.00146EPSS

CVE•added 2013/05/20 2:44 p.m.•47 views

CVE-2013-1010

9.3CVSS7.5AI score0.01302EPSS

CVE•added 2013/09/19 10:27 a.m.•47 views

CVE-2013-1043

6.8CVSS7.8AI score0.01866EPSS

CVE•added 2013/09/19 10:28 a.m.•47 views

CVE-2013-5139

The IOSerialFamily driver in Apple iOS before 7 allows attackers to execute arbitrary code or cause a denial of service (out-of-bounds array access) via a crafted application.

9.3CVSS7.2AI score0.00912EPSS

CVE•added 2013/05/20 2:44 p.m.•46 views

CVE-2013-1000

9.3CVSS7.5AI score0.01302EPSS

CVE•added 2013/05/20 2:44 p.m.•46 views

CVE-2013-1007

9.3CVSS7.5AI score0.01302EPSS

CVE•added 2013/09/19 10:28 a.m.•46 views

CVE-2013-5140

The kernel in Apple iOS before 7 allows remote attackers to cause a denial of service (assertion failure and device restart) via an invalid packet fragment.

7.8CVSS6AI score0.0066EPSS

CVE•added 2013/05/20 2:44 p.m.•45 views

CVE-2013-1006

9.3CVSS7.5AI score0.01302EPSS

CVE•added 2013/09/19 10:27 a.m.•45 views

CVE-2013-1044

6.8CVSS7.8AI score0.01866EPSS

CVE•added 2013/09/19 10:27 a.m.•45 views

CVE-2013-5127

6.8CVSS7.8AI score0.01866EPSS

CVE•added 2013/09/16 1:2 p.m.•44 views

CVE-2013-1028

The IPSec implementation in Apple Mac OS X before 10.8.5, when Hybrid Auth is used, does not verify X.509 certificates from security gateways, which allows man-in-the-middle attackers to spoof security gateways and obtain sensitive information via a crafted certificate.

5.8CVSS5.3AI score0.0038EPSS

CVE•added 2013/09/19 10:27 a.m.•44 views

CVE-2013-1042

6.8CVSS7.8AI score0.01866EPSS

CVE•added 2013/09/19 10:27 a.m.•44 views

CVE-2013-5128

6.8CVSS7.8AI score0.01866EPSS

CVE•added 2013/09/19 10:27 a.m.•44 views

CVE-2013-5131

Cross-site scripting (XSS) vulnerability in WebKit in Apple iOS before 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

4.3CVSS5AI score0.0032EPSS

CVE•added 2013/09/19 10:28 a.m.•44 views

CVE-2013-5137

IOKit in Apple iOS before 7 allows attackers to send user-interface events to the foreground app by leveraging control over a background app and using the (1) task-completion API or (2) VoIP API.

2.6CVSS5.9AI score0.00371EPSS

CVE•added 2013/09/19 10:28 a.m.•44 views

CVE-2013-5141

The kernel in Apple iOS before 7 uses an incorrect data size for a certain integer variable, which allows attackers to cause a denial of service (infinite loop and device hang) via a crafted application, related to an "integer truncation vulnerability."

7.1CVSS5.6AI score0.00532EPSS

CVE•added 2013/06/05 2:39 p.m.•43 views

CVE-2013-3950

Stack-based buffer overflow in the openSharedCacheFile function in dyld.cpp in dyld in Apple iOS 5.1.x and 6.x through 6.1.3 makes it easier for attackers to conduct untethering attacks via a long string in the DYLD_SHARED_CACHE_DIR environment variable.

5CVSS6.2AI score0.00845EPSS

CVE•added 2013/09/19 10:27 a.m.•42 views

CVE-2013-1045

6.8CVSS7.8AI score0.01866EPSS

CVE•added 2013/09/19 10:27 a.m.•42 views

CVE-2013-1046

6.8CVSS7.8AI score0.01866EPSS

CVE•added 2013/09/19 10:27 a.m.•42 views

CVE-2013-5129

Multiple cross-site scripting (XSS) vulnerabilities in WebKit in Apple iOS before 7 allow user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving a (1) drag-and-drop or (2) copy-and-paste operation.

4.3CVSS5AI score0.0032EPSS

CVE•added 2013/09/19 10:28 a.m.•42 views

CVE-2013-5155

The Sandbox subsystem in Apple iOS before 7 allows attackers to cause a denial of service (infinite loop) via an application that writes crafted values to /dev/random.

7.1CVSS5.7AI score0.00458EPSS

CVE•added 2013/01/29 5:58 a.m.•41 views

CVE-2013-0956

WebKit, as used in Apple iOS before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-01-28-1.

6.8CVSS7.8AI score0.01314EPSS

CVE•added 2013/09/19 10:27 a.m.•41 views

CVE-2013-0957

Data Protection in Apple iOS before 7 allows attackers to bypass intended limits on incorrect passcode entry, and consequently avoid a configured Erase Data setting, by leveraging the presence of an app in the third-party sandbox.

5.8CVSS5.7AI score0.00288EPSS

CVE•added 2013/09/16 1:2 p.m.•41 views

CVE-2013-1026

Buffer overflow in ImageIO in Apple Mac OS X before 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted JPEG2000 data in a PDF document.

6.8CVSS7.8AI score0.01006EPSS

Total number of security vulnerabilities66