Apple iOS Multiple Memory Corruption Vulnerabilities (APPLE-SA-2014-03-10-1)

Release date:
Updated on:

Affected Systems:
Apple iOS <7.1
Description:
--------------------------------------------------------------------------------
Bugtraq id: 66087
CVE (CAN) ID: CVE-2013-5133, CVE-2014-1274, CVE-2013-6835, CVE-2014-1276, CVE-2014-1277, CVE-2014-1281, CVE-2014-1284, CVE-2014-1285

IOS is an operating system developed by Apple for mobile devices. It supports iPhone, iPod touch, iPad, and Apple TV.

In versions earlier than iOS 7.1, multiple security vulnerabilities exist. Attackers can exploit these vulnerabilities to perform man-in-the-middle attacks, access arbitrary files, obtain unauthorized access permissions, bypass security restrictions, and perform other attacks.

<* Source: Apple

Link: http://support.apple.com/kb/HT6162
Http://support.apple.com/kb/HT1222
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Apple
-----
Apple has released a Security Bulletin (APPLE-SA-2014-03-10-1) and patches for this:
APPLE-SA-2014-03-10-1: iOS 7.1
Link: http://support.apple.com/kb/HT1222