Apple iOS APPLE-SA-2014-03-10-1 Multiple Security Vulnerabilities
BID:66087
Info
Apple iOS APPLE-SA-2014-03-10-1 Multiple Security Vulnerabilities
| Bugtraq ID: | 66087 |
| Class: | Unknown |
| CVE: |
CVE-2013-5133 CVE-2014-1274 CVE-2014-1276 CVE-2014-1277 CVE-2014-1281 CVE-2014-1284 CVE-2014-1285 CVE-2014-1286 |
| Remote: | Yes |
| Local: | Yes |
| Published: | Mar 10 2014 12:00AM |
| Updated: | Mar 12 2014 12:33AM |
| Credit: | Apple, evad3rs, Guillaume Ross, Min Zheng, Hui Xue, and Dr. Tao (Lenx) Wei of FireEye, Stefan Esser, Walter Hoelblinger of Hoelblinger.com, Morgan Adams, Tom Pennington, Roboboi99 and Bogdan Alecu of M-sec.net |
| Vulnerable: |
Apple iPod Touch 0 Apple iPhone 4.0 Apple iPad 0 Apple iOS 4.2.1 Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 3.2.2 Apple iOS 3.2.1 Apple iOS 5.1.1 Apple iOS 5.1 Apple iOS 5.0.1 Apple iOS 5 Apple iOS 4.3.5 Apple iOS 4.3.4 Apple iOS 4.3.3 Apple iOS 4.3.2 Apple iOS 4.3.1 Apple iOS 4.3 Apple iOS 4.2.9 Apple iOS 4.2.8 Apple iOS 4.2.7 Apple iOS 4.2.6 Apple iOS 4.2.5 Apple iOS 4.2.10 Apple iOS 4.2 Apple iOS 4.1 Apple iOS 4 Apple iOS 3.2 Apple iOS 3.1 Apple iOS 3.0 Apple iOS 2.1 Apple iOS 2.0 |
| Not Vulnerable: | |
Discussion
Apple iOS APPLE-SA-2014-03-10-1 Multiple Security Vulnerabilities
Apple iOS is prone to multiple vulnerabilities.
Attackers can exploit these issues to perform man-in-the-middle attack, to access arbitrary files, gain unauthorized access, bypass security restrictions, and perform other attacks. Failed attacks may cause denial-of-service conditions.
These issues affect Apple iOS versions prior to 7.1.
Note: The issue described by CVE-2013-6835 has been moved to BID 66108 (Apple iOS 'facetime-audio://' Security Bypass Vulnerability) for better documentation.
Apple iOS is prone to multiple vulnerabilities.
Attackers can exploit these issues to perform man-in-the-middle attack, to access arbitrary files, gain unauthorized access, bypass security restrictions, and perform other attacks. Failed attacks may cause denial-of-service conditions.
These issues affect Apple iOS versions prior to 7.1.
Note: The issue described by CVE-2013-6835 has been moved to BID 66108 (Apple iOS 'facetime-audio://' Security Bypass Vulnerability) for better documentation.
Exploit / POC
Apple iOS APPLE-SA-2014-03-10-1 Multiple Security Vulnerabilities
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Some of these issues may be trivial to exploit and will not require specific exploit code.
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Some of these issues may be trivial to exploit and will not require specific exploit code.
Solution / Fix
Apple iOS APPLE-SA-2014-03-10-1 Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Apple iOS APPLE-SA-2014-03-10-1 Multiple Security Vulnerabilities
References:
References:
- Apple iOS Homepage (Apple)