The Home screen component in Apple iOS before 5 does not properly support a certain application-switching gesture, which might allow physically proximate attackers to obtain sensitive state information by watching the device's screen.
Max CVSS
2.1
EPSS Score
0.12%
Published
2011-10-14
Updated
2017-08-29
The Data Security component in Apple iOS before 5 and Apple TV before 4.4 does not properly restrict use of the MD5 hash algorithm within X.509 certificates, which makes it easier for man-in-the-middle attackers to spoof servers or obtain sensitive information via a crafted certificate.
Max CVSS
2.6
EPSS Score
0.18%
Published
2011-10-14
Updated
2017-08-29
CalDAV in Apple iOS before 5 does not validate X.509 certificates for SSL sessions, which allows man-in-the-middle attackers to spoof calendar servers and obtain sensitive information via an arbitrary certificate.
Max CVSS
2.6
EPSS Score
0.09%
Published
2011-10-14
Updated
2011-10-14
CFNetwork in Apple iOS before 5.0.1 and Mac OS X 10.7 before 10.7.2 does not properly parse URLs, which allows remote attackers to trigger visits to unintended web sites, and transmission of cookies to unintended web sites, via a crafted (1) http or (2) https URL.
Max CVSS
5.0
EPSS Score
0.53%
Published
2011-10-14
Updated
2017-08-29
4 vulnerabilities found