Apple

iPhone OS

3821 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.8

CVE-2010-3829

  • EPSS 0.62%
  • Veröffentlicht 26.11.2010 20:00:03
  • Zuletzt bearbeitet 11.04.2025 00:51:21

WebKit in Apple iOS before 4.2 allows remote attackers to bypass the remote image loading setting in Mail via an HTML LINK element with a DNS prefetching property, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Readi...

7.2

CVE-2010-3830

  • EPSS 0.3%
  • Veröffentlicht 26.11.2010 20:00:03
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Networking in Apple iOS before 4.2 accesses an invalid pointer during the processing of packet filter rules, which allows local users to gain privileges via unspecified vectors.

4.3

CVE-2010-3831

  • EPSS 0.47%
  • Veröffentlicht 26.11.2010 20:00:03
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Photos in Apple iOS before 4.2 enables support for HTTP Basic Authentication over an unencrypted connection, which allows man-in-the-middle attackers to read MobileMe account passwords by spoofing a MobileMe Gallery server during a "Send to MobileMe"...

6.8

CVE-2010-3832

  • EPSS 4.27%
  • Veröffentlicht 26.11.2010 20:00:03
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Heap-based buffer overflow in the GSM mobility management implementation in Telephony in Apple iOS before 4.2 on the iPhone and iPad allows remote attackers to execute arbitrary code on the baseband processor via a crafted Temporary Mobile Subscriber...

4.3

CVE-2010-3827

  • EPSS 0.56%
  • Veröffentlicht 26.11.2010 20:00:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Apple iOS before 4.2 does not properly validate signatures before displaying a configuration profile in the configuration installation utility, which allows remote attackers to spoof profiles via unspecified vectors.

4.3

CVE-2010-4008

Exploit
  • EPSS 0.76%
  • Veröffentlicht 17.11.2010 01:00:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of malformed XPath expressions, which allows context-dependent attackers to ca...

6.8

CVE-2010-1781

  • EPSS 8%
  • Veröffentlicht 09.09.2010 22:00:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Double free vulnerability in WebKit in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to the rendering of an inline element.

10

CVE-2010-1809

  • EPSS 0.86%
  • Veröffentlicht 09.09.2010 22:00:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The Accessibility component in Apple iOS before 4.1 on the iPhone and iPod touch does not perform the expected VoiceOver announcement associated with the location services icon, which has unspecified impact and attack vectors.

3.5

CVE-2010-1810

  • EPSS 0.13%
  • Veröffentlicht 09.09.2010 22:00:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

FaceTime in Apple iOS before 4.1 on the iPhone and iPod touch does not properly handle invalid X.509 certificates, which allows man-in-the-middle attackers to redirect calls via a crafted certificate.

6.8

CVE-2010-1811

  • EPSS 4.37%
  • Veröffentlicht 09.09.2010 22:00:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

ImageIO in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted TIFF file.