Vulnerabilities > Apple > Iphone OS > 1.0.0

DATE CVE VULNERABILITY TITLE RISK
2012-09-20 CVE-2012-3725 Information Exposure vulnerability in Apple Iphone OS
The DNAv4 protocol implementation in the DHCP component in Apple iOS before 6 sends Wi-Fi packets containing a MAC address of a host on a previously used network, which might allow remote attackers to obtain sensitive information about previous device locations by sniffing an unencrypted Wi-Fi network for these packets.
low complexity
apple CWE-200
3.3
2012-09-20 CVE-2012-3724 Information Exposure vulnerability in Apple Iphone OS
CFNetwork in Apple iOS before 6 does not properly identify the host portion of a URL, which allows remote attackers to obtain sensitive information by leveraging the construction of an HTTP request with an incorrect hostname derived from a malformed URL.
network
low complexity
apple CWE-200
5.0
2012-09-20 CVE-2012-3722 Resource Management Errors vulnerability in Apple Iphone OS, mac OS X and mac OS X Server
The Sorenson codec in QuickTime in Apple Mac OS X before 10.7.5, and in CoreMedia in iOS before 6, accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with Sorenson encoding.
network
apple CWE-399
6.8
2012-09-13 CVE-2012-3701 Buffer Errors vulnerability in Apple Iphone OS and Itunes
WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
network
apple CWE-119
critical
9.3
2012-09-13 CVE-2012-3687 Buffer Errors vulnerability in Apple Iphone OS and Itunes
WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
network
apple CWE-119
critical
9.3
2012-09-13 CVE-2012-3632 Buffer Errors vulnerability in Apple Iphone OS and Itunes
WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
network
apple CWE-119
critical
9.3
2012-09-13 CVE-2012-3621 Buffer Errors vulnerability in Apple Iphone OS and Itunes
WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
network
apple CWE-119
critical
9.3
2012-09-13 CVE-2012-3607 Buffer Errors vulnerability in Apple Iphone OS and Itunes
WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
network
apple CWE-119
critical
9.3
2012-09-13 CVE-2012-3606 Buffer Errors vulnerability in Apple Iphone OS and Itunes
WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.
network
apple CWE-119
critical
9.3
2012-05-16 CVE-2011-3102 Numeric Errors vulnerability in Google Chrome
Off-by-one error in libxml2, as used in Google Chrome before 19.0.1084.46 and other products, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via unknown vectors.
network
google apple CWE-189
6.8