Vulnerabilities > Apple > Ipod Touch > High

DATE CVE VULNERABILITY TITLE RISK
2009-06-19 CVE-2009-1692 Resource Management Errors vulnerability in Apple Iphone OS, Ipod Touch and Safari
WebKit before r41741, as used in Apple iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Safari, and other software, allows remote attackers to cause a denial of service (memory consumption or device reset) via a web page containing an HTMLSelectElement object with a large length attribute, related to the length property of a Select object.
network
apple CWE-399
7.1
2009-06-19 CVE-2009-1683 Unspecified vulnerability in Apple Iphone OS and Ipod Touch
The Telephony component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to cause a denial of service (device reset) via a crafted ICMP echo request, which triggers an assertion error related to a "logic issue."
network
low complexity
apple
7.8
2009-06-19 CVE-2009-0959 Improper Input Validation vulnerability in Apple Iphone OS and Ipod Touch
The MPEG-4 video codec in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to cause a denial of service (device reset) via a crafted MPEG-4 video file that triggers an "input validation issue."
network
apple CWE-20
7.1
2008-09-11 CVE-2008-3631 Permissions, Privileges, and Access Controls vulnerability in Apple Ipod Touch 2.0/2.0.1/2.0.2
Application Sandbox in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, does not properly isolate third-party applications, which allows attackers to read arbitrary files in a third-party application's sandbox via a different third-party application.
network
apple CWE-264
7.1