All the vulnerabilites related to Apple Inc. - iOS
jvndb-2009-000040
Vulnerability from jvndb
Published
2009-06-18 17:54
Modified
2009-06-18 17:54
Severity ?
() - -
Summary
iPhone OS denial of service (DoS) vulnerability
Details
iPhone OS from Apple contains a denial of service (DoS) vulnerability. Masaki Yoshida reported this vulnerability to IPA. JPCERT/CC coordinated with the vendor under Information Security Early Warning Partnership.
Impacted products
Show details on JVN DB website


{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000040.html",
  "dc:date": "2009-06-18T17:54+09:00",
  "dcterms:issued": "2009-06-18T17:54+09:00",
  "dcterms:modified": "2009-06-18T17:54+09:00",
  "description": "iPhone OS from Apple contains a denial of service (DoS) vulnerability.\r\n\r\nMasaki Yoshida reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the vendor under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000040.html",
  "sec:cpe": [
    {
      "#text": "cpe:/o:apple:iphone_os",
      "@product": "iOS",
      "@vendor": "Apple Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:apple:iphone_os_for_ipod_touch",
      "@product": "iOS for iPod touch",
      "@vendor": "Apple Inc.",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "7.8",
    "@severity": "High",
    "@type": "Base",
    "@vector": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2009-000040",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN87239696/index.html",
      "@id": "JVN#87239696",
      "@source": "JVN"
    },
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1683",
      "@id": "CVE-2009-1683",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-1683",
      "@id": "CVE-2009-1683",
      "@source": "NVD"
    },
    {
      "#text": "http://www.ipa.go.jp/security/english/vuln/200906_iphone_en.html",
      "@id": "Security Alert for Vulnerability in iPhone OS",
      "@source": "IPA SECURITY ALERTS"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-20",
      "@title": "Improper Input Validation(CWE-20)"
    }
  ],
  "title": "iPhone OS denial of service (DoS) vulnerability"
}

jvndb-2014-004316
Vulnerability from jvndb
Published
2014-09-25 14:54
Modified
2014-09-25 14:54
Severity ?
() - -
Summary
Safari issue in handling application cache
Details
Safari contains an issue in the handling of application cache where contents that were cached when the private browsing function is turned off may be used after the private browsing function is turned on. Yosuke HASEGAWA of NetAgent Co.,Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
Impacted products
Apple Inc.Safari
Apple Inc.iOS
Show details on JVN DB website


{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2014/JVNDB-2014-004316.html",
  "dc:date": "2014-09-25T14:54+09:00",
  "dcterms:issued": "2014-09-25T14:54+09:00",
  "dcterms:modified": "2014-09-25T14:54+09:00",
  "description": "Safari contains an issue in the handling of application cache where contents that were cached when the private browsing function is turned off may be used after the private browsing function is turned on.\r\n\r\nYosuke HASEGAWA of NetAgent Co.,Ltd. reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2014/JVNDB-2014-004316.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:apple:safari",
      "@product": "Safari",
      "@vendor": "Apple Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:apple:iphone_os",
      "@product": "iOS",
      "@vendor": "Apple Inc.",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "5.0",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2014-004316",
  "sec:references": [
    {
      "#text": "http://jvn.jp/vu/JVNVU93868849/index.html",
      "@id": "JVNVU#93868849",
      "@source": "JVN"
    },
    {
      "#text": "http://jvn.jp/en/jp/JVN45442753/index.html",
      "@id": "JVN#45442753",
      "@source": "JVN"
    },
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4409",
      "@id": "CVE-2014-4409",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-4409",
      "@id": "CVE-2014-4409",
      "@source": "NVD"
    },
    {
      "#text": "http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html",
      "@id": "APPLE-SA-2014-09-17-1 iOS 8",
      "@source": "Related Information"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-DesignError",
      "@title": "No Mapping(CWE-DesignError)"
    }
  ],
  "title": "Safari issue in handling application cache"
}

jvndb-2010-001538
Vulnerability from jvndb
Published
2010-11-26 17:16
Modified
2010-12-10 17:48
Severity ?
() - -
Summary
Safari address bar spoofing vulnerability
Details
Safari contains a vulnerability where the URL displayed in the address may be spoofed. Safari contains a vulnerability where the address bar displays a character string that looks like a different URL than the URL that is being accessed.
Show details on JVN DB website


{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-001538.html",
  "dc:date": "2010-12-10T17:48+09:00",
  "dcterms:issued": "2010-11-26T17:16+09:00",
  "dcterms:modified": "2010-12-10T17:48+09:00",
  "description": "Safari contains a vulnerability where the URL displayed in the address may be spoofed.\r\n\r\nSafari contains a vulnerability where the address bar displays a character string that looks like a different URL than the URL that is being accessed.",
  "link": "https://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-001538.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:apple:safari",
      "@product": "Safari",
      "@vendor": "Apple Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:apple:ipad",
      "@product": "iPad",
      "@vendor": "Apple Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:apple:iphone",
      "@product": "iPhone",
      "@vendor": "Apple Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/h:apple:ipod_touch",
      "@product": "iPod touch",
      "@vendor": "Apple Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:apple:iphone_os",
      "@product": "iOS",
      "@vendor": "Apple Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:apple:iphone_os_for_ipod_touch",
      "@product": "iOS for iPod touch",
      "@vendor": "Apple Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:apple:mac_os_x",
      "@product": "Apple Mac OS X",
      "@vendor": "Apple Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:apple:mac_os_x_server",
      "@product": "Apple Mac OS X Server",
      "@vendor": "Apple Inc.",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "4.3",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2010-001538",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN46026251/index.html",
      "@id": "JVN#46026251",
      "@source": "JVN"
    },
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1384",
      "@id": "CVE-2010-1384",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-1384",
      "@id": "CVE-2010-1384",
      "@source": "NVD"
    },
    {
      "#text": "http://secunia.com/advisories/40105",
      "@id": "SA40105",
      "@source": "SECUNIA"
    },
    {
      "#text": "http://securitytracker.com/id?1024067",
      "@id": "1024067",
      "@source": "SECTRACK"
    },
    {
      "#text": "http://www.vupen.com/english/advisories/2010/1373",
      "@id": "VUPEN/ADV-2010-1373",
      "@source": "VUPEN"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "Safari address bar spoofing vulnerability"
}

jvndb-2018-000116
Vulnerability from jvndb
Published
2018-11-02 14:42
Modified
2018-11-02 14:42
Severity ?
Summary
Mail app for iOS vulnerable to denial-of-service (DoS)
Details
Mail app for iOS provided by Apple contains a denial-of-service (DoS) vulnerability due to an issue in the handling of a maliciously crafted S/MIME signed message. Yukinobu Nagayasu of LAC Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
Impacted products
Apple Inc.iOS
Show details on JVN DB website


{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2018/JVNDB-2018-000116.html",
  "dc:date": "2018-11-02T14:42+09:00",
  "dcterms:issued": "2018-11-02T14:42+09:00",
  "dcterms:modified": "2018-11-02T14:42+09:00",
  "description": "Mail app for iOS provided by Apple contains a denial-of-service (DoS) vulnerability due to an issue in the handling of a maliciously crafted S/MIME signed message.\r\n\r\nYukinobu Nagayasu of LAC Co., Ltd. reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2018/JVNDB-2018-000116.html",
  "sec:cpe": {
    "#text": "cpe:/o:apple:iphone_os",
    "@product": "iOS",
    "@vendor": "Apple Inc.",
    "@version": "2.2"
  },
  "sec:cvss": [
    {
      "@score": "5.0",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
      "@version": "2.0"
    },
    {
      "@score": "7.5",
      "@severity": "High",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2018-000116",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN96551318/index.html",
      "@id": "JVN#96551318",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4400",
      "@id": "CVE-2018-4400",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2018-4400",
      "@id": "CVE-2018-4400",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-20",
      "@title": "Improper Input Validation(CWE-20)"
    }
  ],
  "title": "Mail app for iOS vulnerable to denial-of-service (DoS)"
}

jvndb-2011-000105
Vulnerability from jvndb
Published
2011-12-15 16:30
Modified
2011-12-15 16:30
Severity ?
() - -
Summary
Safari for iOS vulnerable to denial-of-service
Details
Safari for iOS contains a denial-of-service (DoS) vulnerability. Shuichiro Suzuki of Fourteenforty Research Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
Impacted products
Apple Inc.iOS
Show details on JVN DB website


{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000105.html",
  "dc:date": "2011-12-15T16:30+09:00",
  "dcterms:issued": "2011-12-15T16:30+09:00",
  "dcterms:modified": "2011-12-15T16:30+09:00",
  "description": "Safari for iOS contains a denial-of-service (DoS) vulnerability.\r\n\r\nShuichiro Suzuki of Fourteenforty Research Institute, Inc. reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000105.html",
  "sec:cpe": {
    "#text": "cpe:/o:apple:iphone_os",
    "@product": "iOS",
    "@vendor": "Apple Inc.",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "4.3",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2011-000105",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN15549168/index.html",
      "@id": "JVN#15549168",
      "@source": "JVN"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-noinfo",
      "@title": "No Mapping(CWE-noinfo)"
    }
  ],
  "title": "Safari for iOS vulnerable to denial-of-service"
}