| Max CVSS | 9.3 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2009-2206 | 6.8 |
Multiple heap-based buffer overflows in the AudioCodecs library in the CoreAudio component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, allow remote attackers to execute arbitrary code or cause a denial of service (applic
|
09-08-2022 - 13:48 | 10-09-2009 - 21:30 | |
| CVE-2009-1724 | 4.3 |
Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows remote attackers to inject arbitrary web script or HTML via vectors r
|
09-08-2022 - 13:48 | 09-07-2009 - 17:30 | |
| CVE-2009-1725 | 9.3 |
WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms; KHTML in kdelibs in KDE; QtWebKit (aka Qt toolkit); and possibly other products do not properly handle numeric character
|
09-08-2022 - 13:48 | 09-07-2009 - 17:30 | |
| CVE-2009-2199 | 5.8 |
Incomplete blacklist vulnerability in WebKit in Apple Safari before 4.0.3, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows remote attackers to spoof domain names in URLs, and possibly conduct phishi
|
09-08-2022 - 13:48 | 12-08-2009 - 19:30 | |
| CVE-2009-2795 | 7.2 |
Heap-based buffer overflow in the Recovery Mode component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, allows local users to bypass the passcode requirement and access arbitrary data via vectors related to "command parsin
|
16-11-2018 - 15:38 | 10-09-2009 - 21:30 | |
| CVE-2009-2797 | 5.0 |
The WebKit component in Safari in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, does not remove usernames and passwords from URLs sent in Referer headers, which allows remote attackers to obtain sensitive information by readi
|
16-11-2018 - 15:38 | 10-09-2009 - 21:30 | |
| CVE-2009-2202 | 9.3 |
Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted H.264 movie file.
|
30-10-2018 - 16:25 | 10-09-2009 - 21:30 | |
| CVE-2008-3630 | 6.4 |
mDNSResponder in Apple Bonjour for Windows before 1.0.5, when an application uses the Bonjour API for unicast DNS, does not choose random values for transaction IDs or source ports in DNS requests, which makes it easier for remote attackers to spoof
|
30-10-2018 - 16:25 | 11-09-2008 - 01:13 | |
| CVE-2009-2203 | 9.3 |
Buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MPEG-4 video file.
|
30-10-2018 - 16:25 | 10-09-2009 - 21:30 | |
| CVE-2009-2798 | 9.3 |
Heap-based buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FlashPix file.
|
30-10-2018 - 16:25 | 10-09-2009 - 21:30 | |
| CVE-2008-2326 | 5.0 |
mDNSResponder in the Bonjour Namespace Provider in Apple Bonjour for Windows before 1.0.5 allows attackers to cause a denial of service (NULL pointer dereference and application crash) by resolving a crafted .local domain name that contains a long la
|
30-10-2018 - 16:25 | 11-09-2008 - 01:10 | |
| CVE-2009-2799 | 9.3 |
Heap-based buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted H.264 movie file.
|
30-10-2018 - 16:25 | 10-09-2009 - 21:30 | |
| CVE-2008-3636 | 7.2 |
Integer overflow in the IopfCompleteRequest API in the kernel in Microsoft Windows 2000, XP, Server 2003, and Vista allows context-dependent attackers to gain privileges. NOTE: this issue was originally reported for GEARAspiWDM.sys 2.0.7.5 in Gear So
|
11-10-2018 - 20:48 | 11-09-2008 - 01:13 | |
| CVE-2009-2207 | 2.1 |
The MobileMail component in Apple iPhone OS 3.0 and 3.0.1, and iPhone OS 3.0 for iPod touch, lists deleted e-mail messages in Spotlight search results, which might allow local users to obtain sensitive information by reading these messages.
|
17-08-2017 - 01:30 | 10-09-2009 - 21:30 | |
| CVE-2009-2796 | 2.1 |
The UIKit component in Apple iPhone OS 3.0, and iPhone OS 3.0.1 for iPod touch, allows physically proximate attackers to discover a password by watching a user undo deletions of characters in the password.
|
17-08-2017 - 01:30 | 10-09-2009 - 21:30 | |
| CVE-2009-2794 | 4.6 |
The Exchange Support component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, does not properly implement the "Maximum inactivity time lock" functionality, which allows local users to bypass intended Microsoft Exchange rest
|
17-08-2017 - 01:30 | 10-09-2009 - 21:30 | |
| CVE-2009-2815 | 7.8 |
The Telephony component in Apple iPhone OS before 3.1 does not properly handle SMS arrival notifications, which allows remote attackers to cause a denial of service (NULL pointer dereference and service interruption) via a crafted SMS message.
|
24-09-2009 - 04:00 | 10-09-2009 - 21:30 | |
| CVE-2008-3634 | 2.6 |
Apple iTunes before 8.0 on Mac OS X 10.4.11, when iTunes Music Sharing is enabled but blocked by the host-based firewall, presents misleading information about firewall security, which might allow remote attackers to leverage an exposure that would b
|
11-09-2008 - 04:00 | 11-09-2008 - 01:13 |