Apple iOS vulnerabilities

CVE-2012-3742 [MEDIUM] CWE-264 CVE-2012-3742: Safari in Apple iOS before 6 does not properly restrict use of an unspecified Unicode character that Safari in Apple iOS before 6 does not properly restrict use of an unspecified Unicode character that looks similar to the https lock indicator, which allows remote attackers to spoof https connections by placing this character in the TITLE element of a web page.

CVE-2012-3743 [MEDIUM] CWE-264 CVE-2012-3743: The System Logs implementation in Apple iOS before 6 does not restrict /var/log access by sandboxed The System Logs implementation in Apple iOS before 6 does not restrict /var/log access by sandboxed apps, which allows remote attackers to obtain sensitive information via a crafted app that reads log files.

CVE-2012-3730 [MEDIUM] CVE-2012-3730: Mail in Apple iOS before 6 does not properly handle reuse of Content-ID header values, which allows Mail in Apple iOS before 6 does not properly handle reuse of Content-ID header values, which allows remote attackers to spoof attachments via a header value that was also used in a previous e-mail message, as demonstrated by a message from a different sender.

CVE-2012-3745 [MEDIUM] CWE-119 CVE-2012-3745: Off-by-one error in Telephony in Apple iOS before 6 allows remote attackers to cause a denial of ser Off-by-one error in Telephony in Apple iOS before 6 allows remote attackers to cause a denial of service (buffer overflow and connectivity outage) via a crafted user-data header in an SMS message.

CVE-2012-3728 [MEDIUM] CWE-264 CVE-2012-3728: The kernel in Apple iOS before 6 dereferences invalid pointers during the handling of packet-filter The kernel in Apple iOS before 6 dereferences invalid pointers during the handling of packet-filter data structures, which allows local users to gain privileges via a crafted program that makes packet-filter ioctl calls.

CVE-2012-3733 [MEDIUM] CWE-200 CVE-2012-3733: Messages in Apple iOS before 6, when multiple iMessage e-mail addresses are configured, does not ens Messages in Apple iOS before 6, when multiple iMessage e-mail addresses are configured, does not ensure that a reply's sender address matches the recipient address of the original message, which allows remote attackers to obtain potentially sensitive information about alternate e-mail addresses in opportunistic circumstances by reading a reply.

CVE-2012-3722 [MEDIUM] CWE-399 CVE-2012-3722: The Sorenson codec in QuickTime in Apple Mac OS X before 10.7.5, and in CoreMedia in iOS before 6, a The Sorenson codec in QuickTime in Apple Mac OS X before 10.7.5, and in CoreMedia in iOS before 6, accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with Sorenson encoding.

CVE-2012-3724 [MEDIUM] CWE-200 CVE-2012-3724: CFNetwork in Apple iOS before 6 does not properly identify the host portion of a URL, which allows r CFNetwork in Apple iOS before 6 does not properly identify the host portion of a URL, which allows remote attackers to obtain sensitive information by leveraging the construction of an HTTP request with an incorrect hostname derived from a malformed URL.

CVE-2012-3747 [MEDIUM] CWE-119 CVE-2012-3747: WebKit, as used in Apple iOS before 6, allows remote attackers to execute arbitrary code or cause a WebKit, as used in Apple iOS before 6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

CVE-2012-3735 [LOW] CWE-200 CVE-2012-3735: The Passcode Lock implementation in Apple iOS before 6 does not properly interact with the "Slide to The Passcode Lock implementation in Apple iOS before 6 does not properly interact with the "Slide to Power Off" feature, which allows physically proximate attackers to see the most recently used third-party app by watching the device's screen.

CVE-2012-3731 [LOW] CVE-2012-3731: Mail in Apple iOS before 6 does not properly implement the Data Protection feature for e-mail attach Mail in Apple iOS before 6 does not properly implement the Data Protection feature for e-mail attachments, which allows physically proximate attackers to bypass an intended passcode requirement via unspecified vectors.

CVE-2012-3739 [LOW] CWE-264 CVE-2012-3739: The Passcode Lock implementation in Apple iOS before 6 allows physically proximate attackers to bypa The Passcode Lock implementation in Apple iOS before 6 allows physically proximate attackers to bypass an intended passcode requirement via vectors involving use of the camera.

CVE-2012-3725 [LOW] CWE-200 CVE-2012-3725: The DNAv4 protocol implementation in the DHCP component in Apple iOS before 6 sends Wi-Fi packets co The DNAv4 protocol implementation in the DHCP component in Apple iOS before 6 sends Wi-Fi packets containing a MAC address of a host on a previously used network, which might allow remote attackers to obtain sensitive information about previous device locations by sniffing an unencrypted Wi-Fi network for these packets.

CVE-2012-3740 [LOW] CWE-264 CVE-2012-3740: The Passcode Lock implementation in Apple iOS before 6 does not properly manage the lock state, whic The Passcode Lock implementation in Apple iOS before 6 does not properly manage the lock state, which allows physically proximate attackers to bypass an intended passcode requirement via unspecified vectors.

CVE-2012-3737 [LOW] CWE-264 CVE-2012-3737: The Passcode Lock implementation in Apple iOS before 6 does not properly restrict photo viewing, whi The Passcode Lock implementation in Apple iOS before 6 does not properly restrict photo viewing, which allows physically proximate attackers to view arbitrary stored photos by spoofing a time value.

CVE-2012-3741 [LOW] CWE-287 CVE-2012-3741: The Restrictions (aka Parental Controls) implementation in Apple iOS before 6 does not properly hand The Restrictions (aka Parental Controls) implementation in Apple iOS before 6 does not properly handle purchase attempts after a Disable Restrictions action, which allows local users to bypass an intended Apple ID authentication step via an app that performs purchase transactions.

CVE-2012-3734 [LOW] CWE-310 CVE-2012-3734: Office Viewer in Apple iOS before 6 writes cleartext document data to a temporary file, which might Office Viewer in Apple iOS before 6 writes cleartext document data to a temporary file, which might allow local users to bypass a document's intended (1) Data Protection level or (2) encryption state by reading the temporary content.

CVE-2012-3729 [LOW] CWE-264 CVE-2012-3729: The Berkeley Packet Filter (BPF) interpreter implementation in the kernel in Apple iOS before 6 acce The Berkeley Packet Filter (BPF) interpreter implementation in the kernel in Apple iOS before 6 accesses uninitialized memory locations, which allows local users to obtain sensitive information about the layout of kernel memory via a crafted program that uses a BPF interface.

CVE-2012-3738 [LOW] CWE-264 CVE-2012-3738: The Emergency Dialer screen in the Passcode Lock implementation in Apple iOS before 6 does not prope The Emergency Dialer screen in the Passcode Lock implementation in Apple iOS before 6 does not properly limit the dialing methods, which allows physically proximate attackers to bypass intended access restrictions and make FaceTime calls through Voice Dialing, or obtain sensitive contact information by attempting to make a FaceTime call and reading the c

CVE-2012-3632 [CRITICAL] CWE-119 CVE-2012-3632: WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or ca WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1.