Vulnerabilities > Apple > Apple TV > 4.0

DATE CVE VULNERABILITY TITLE RISK
2011-10-14 CVE-2011-3427 Information Exposure vulnerability in Apple TV and Iphone OS
The Data Security component in Apple iOS before 5 and Apple TV before 4.4 does not properly restrict use of the MD5 hash algorithm within X.509 certificates, which makes it easier for man-in-the-middle attackers to spoof servers or obtain sensitive information via a crafted certificate.
network
high complexity
apple CWE-200
2.6
2011-10-14 CVE-2011-3259 Resource Management Errors vulnerability in Apple TV and Iphone OS
The kernel in Apple iOS before 5 and Apple TV before 4.4 does not properly recover memory allocated for incomplete TCP connections, which allows remote attackers to cause a denial of service (resource consumption) by making many connection attempts.
network
low complexity
apple CWE-399
5.0
2011-03-11 CVE-2011-1418 Information Exposure vulnerability in Apple TV, Iphone OS and Tvos
The stateless address autoconfiguration (aka SLAAC) functionality in the IPv6 networking implementation in Apple iOS before 4.3 and Apple TV before 4.2 places the MAC address into the IPv6 address, which makes it easier for remote IPv6 servers to track users by logging source IPv6 addresses.
network
low complexity
apple CWE-200
5.0
2011-03-11 CVE-2011-0162 Improper Input Validation vulnerability in Apple TV, Iphone OS and Tvos
Wi-Fi in Apple iOS before 4.3 and Apple TV before 4.2 does not properly perform bounds checking for Wi-Fi frames, which allows remote attackers to cause a denial of service (device reset) via unspecified traffic on the local wireless network.
network
low complexity
apple CWE-20
7.8