Apple iPhone and iPod touch iOS Multiple Vulnerabilities

Multiple vulnerabilitieshave been identified in Apple iPhone and iPod touch iOS, which could be exploited by attackers to disclose sensitive information, bypass security restrictions or compromise an affected system.

1. An security issue is caused due to the Application Sandbox not properly restricting access to the user's photo library. This can be exploited by a malicious application to determine visited locations without authorisation.

2. An error in the processing of URLs in CFNetwork can be exploited to cause a stack-based buffer overflow and potentially execute arbitrary code when a user visits a specially crafted web site.

3. Some vulnerabilities in ImageIO can be exploited by malicious people to disclose potentially sensitive information or potentially compromise a vulnerable system.

4. An unspecified error in ImageIO can be exploited to corrupt memory and potentially execute arbitrary code via a specially crafted JPEG image.

5. An error in Libsystem can potentially be exploited by malicious people to execute arbitrary code.

6. Some vulnerabilities in libxml can be exploited by malicious people to cause a DoS (Denial of Service).

7. An error in Passcode Lock can lead to the passcode already being entered if the device is unlocked in response to an alert, and MobileMe is used to Remote Lock the device.

8. A race condition in Passcode Lock allows pairing with a computer, even if the device is locked.Successful exploitation requires that the device was unlocked before powering down.

9. An error in Safari allows web sites to set Cookies, even if the "Accept Cookies" preference is set to "From visited" or "Never".

10. A vulnerability in Safari can be exploited by malicious people to conduct phishing attacks.

11. A vulnerability in Safari can be exploited by malicious people to conduct spoofing attacks.

12. A design error in the Settings application can result in the application incorrectly indicating another wireless network.

13. Multiple vulnerabilities in WebKit can be exploited by malicious people to bypass certain security restrictions, conduct cross-site scripting attacks, disclose sensitive information, or compromise a vulnerable system.

14. A use-after-free error in JavaScriptCore during page transitions can be exploited to execute arbitrary code when a user visits a specially crafted web site.

15. An error in WebKit when handling tables can be exploited to trigger an out-of-bounds memory access and potentially execute arbitrary code.

16. An error in WebKit results in the "history.replaceState" method affecting the parent frame, even if it is in a separate origin. This can be exploited to disclose potentially sensitive information.

17. An error in WebKit allows iframes to display content outside of its boundaries. This can be exploited to e.g. spoof the user interface.