Apple

iPhone OS

3748 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.1

CVE-2009-1692

  • EPSS 4.27%
  • Published 19.06.2009 16:30:00
  • Last modified 09.04.2025 00:30:58

WebKit before r41741, as used in Apple iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Safari, and other software, allows remote attackers to cause a denial of service (memory consumption or device reset) via a web page conta...

9.3

CVE-2009-1698

Exploit
  • EPSS 7.36%
  • Published 10.06.2009 18:00:00
  • Last modified 09.04.2025 00:30:58

WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not initialize a pointer during handling of a Cascading Style Sheets (CSS) attr function call with a large numerical argument, which a...

7.5

CVE-2009-1699

Exploit
  • EPSS 5.63%
  • Published 10.06.2009 18:00:00
  • Last modified 09.04.2025 00:30:58

The XSL stylesheet implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle XML external entities, which allows remote attackers to read arbitrary files ...

4.3

CVE-2009-1700

Exploit
  • EPSS 0.88%
  • Published 10.06.2009 18:00:00
  • Last modified 09.04.2025 00:30:58

The XSLT implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle redirects, which allows remote attackers to read XML content from arbitrary web pages v...

9.3

CVE-2009-1701

Exploit
  • EPSS 9.72%
  • Published 10.06.2009 18:00:00
  • Last modified 09.04.2025 00:30:58

Use-after-free vulnerability in the JavaScript DOM implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of...

4.3

CVE-2009-1702

Exploit
  • EPSS 0.57%
  • Published 10.06.2009 18:00:00
  • Last modified 09.04.2025 00:30:58

Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to improper ...

9.3

CVE-2009-1690

Exploit
  • EPSS 12.22%
  • Published 10.06.2009 14:30:00
  • Last modified 09.04.2025 00:30:58

Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome 1.0.154.53, and possibly other products, allows remote attackers to execute arbitrary c...

7.5

CVE-2009-0946

  • EPSS 15.24%
  • Published 17.04.2009 00:30:00
  • Last modified 09.04.2025 00:30:58

Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in (1) smooth/ftsmooth.c, (2) sfnt/ttcmap.c, and (3) cff/cffload.c.

6.8

CVE-2009-0040

  • EPSS 3.94%
  • Published 22.02.2009 22:30:00
  • Last modified 09.04.2025 00:30:58

The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a cr...

7.1

CVE-2008-1586

  • EPSS 1.47%
  • Published 25.11.2008 23:30:00
  • Last modified 09.04.2025 00:30:58

ImageIO in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allow remote attackers to cause a denial of service (memory consumption and device reset) via a crafted TIFF image.