Apple iOS Prior to 7.1.2 Multiple Security Vulnerabilities
BID:68276
Info
Apple iOS Prior to 7.1.2 Multiple Security Vulnerabilities
| Bugtraq ID: | 68276 |
| Class: | Unknown |
| CVE: |
CVE-2014-1354 CVE-2014-1360 CVE-2014-1352 CVE-2014-1353 CVE-2014-1348 CVE-2014-1349 CVE-2014-1350 CVE-2014-1351 CVE-2014-1345 |
| Remote: | Yes |
| Local: | Yes |
| Published: | Jun 30 2014 12:00AM |
| Updated: | Sep 17 2014 07:19PM |
| Credit: | Dima Kovalenko of codedigging.com, cunzhang from Adlab of Venustech, mblsec, Reno Robert and Dhanesh Kizhakkinan, Andreas Kurtz of NESO Security Labs, Thijs Alkemade of The Adium Project, Sherif Hashim, and Erling Ellingsen of Facebook. |
| Vulnerable: |
Apple iPhone 4.0.1 Apple iPhone 4.3.3 Apple iPhone 4.3.2 Apple iPhone 4.3.1 Apple iPhone 4.3.0 Apple iPhone 4.2.8 Apple iPhone 4.2.5 Apple iPhone 4.2.1 Apple iPhone 4.1 Apple iPhone 4.0.2 Apple iPhone 4.0 Apple iPad 3.2.1 Apple iPad 3.2.2 Apple iPad 3.2 Apple iOS 4.2.1 Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 3.2.2 Apple iOS 3.2.1 Apple iOS 5.1.1 Apple iOS 5.1 Apple iOS 5.0.1 Apple iOS 5 Apple iOS 4.3.5 Apple iOS 4.3.4 Apple iOS 4.3.3 Apple iOS 4.3.2 Apple iOS 4.3.1 Apple iOS 4.3 Apple iOS 4.2.9 Apple iOS 4.2.8 Apple iOS 4.2.7 Apple iOS 4.2.6 Apple iOS 4.2.5 Apple iOS 4.2.10 Apple iOS 4.2 Apple iOS 4.1 Apple iOS 4 Apple iOS 3.2 Apple iOS 3.1 Apple iOS 3.0 Apple iOS 2.1 Apple iOS 2.0 |
| Not Vulnerable: | |
Discussion
Apple iOS Prior to 7.1.2 Multiple Security Vulnerabilities
Apple iOS is prone to multiple vulnerabilities.
The update addresses new vulnerabilities that affect CoreGraphics, Lockdown, Lock Screen, Mail, Safari, Settings, and Siri.
Attackers can exploit these issues to execute arbitrary code, cause denial-of-service conditions, gain unauthorized access, obtain sensitive information, bypass security restrictions, and perform other attacks.
These issues affect iOS Prior to 7.1.2.
Apple iOS is prone to multiple vulnerabilities.
The update addresses new vulnerabilities that affect CoreGraphics, Lockdown, Lock Screen, Mail, Safari, Settings, and Siri.
Attackers can exploit these issues to execute arbitrary code, cause denial-of-service conditions, gain unauthorized access, obtain sensitive information, bypass security restrictions, and perform other attacks.
These issues affect iOS Prior to 7.1.2.
Exploit / POC
Apple iOS Prior to 7.1.2 Multiple Security Vulnerabilities
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Some of these issues may be trivial to exploit and will not require specific exploit code.
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Some of these issues may be trivial to exploit and will not require specific exploit code.
Solution / Fix
Apple iOS Prior to 7.1.2 Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.