Vulnerabilities > Apple > Iphone OS > 1.1.4

DATE CVE VULNERABILITY TITLE RISK
2013-05-20 CVE-2013-1005 Resource Management Errors vulnerability in Apple Iphone OS and Itunes
WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
network
apple microsoft CWE-399
critical
9.3
2013-05-20 CVE-2013-1004 Resource Management Errors vulnerability in Apple Iphone OS and Itunes
WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
network
apple microsoft CWE-399
critical
9.3
2013-05-20 CVE-2013-1003 Resource Management Errors vulnerability in Apple Iphone OS and Itunes
WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
network
apple microsoft CWE-399
critical
9.3
2013-05-20 CVE-2013-1002 Resource Management Errors vulnerability in Apple Iphone OS and Itunes
WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
network
apple microsoft CWE-399
critical
9.3
2013-05-20 CVE-2013-1001 Resource Management Errors vulnerability in Apple Iphone OS and Itunes
WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
network
apple microsoft CWE-399
critical
9.3
2013-05-20 CVE-2013-1000 Buffer Errors vulnerability in Apple Iphone OS and Itunes
WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
network
apple microsoft CWE-119
critical
9.3
2013-05-20 CVE-2013-0999 Buffer Errors vulnerability in Apple Iphone OS and Itunes
WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
network
apple microsoft CWE-119
critical
9.3
2013-03-20 CVE-2013-0981 Unspecified vulnerability in Apple Iphone OS and Tvos
The IOUSBDeviceFamily driver in the USB implementation in the kernel in Apple iOS before 6.1.3 and Apple TV before 5.2.1 accesses pipe object pointers that originated in userspace, which allows local users to gain privileges via crafted code.
local
low complexity
apple
7.2
2013-03-20 CVE-2013-0980 Permissions, Privileges, and Access Controls vulnerability in Apple Iphone OS
The Passcode Lock implementation in Apple iOS before 6.1.3 does not properly manage the lock state, which allows physically proximate attackers to bypass an intended passcode requirement by leveraging an error in the emergency-call feature.
local
low complexity
apple CWE-264
2.1
2013-03-20 CVE-2013-0979 Permissions, Privileges, and Access Controls vulnerability in Apple Iphone OS
lockdownd in Lockdown in Apple iOS before 6.1.3 does not properly consider file types during the permission-setting step of a backup restoration, which allows local users to change the permissions of arbitrary files via a backup that contains a pathname with a symlink.
local
apple CWE-264
1.9