Apple iOS Security Vulnerabilities (APPLE-SA-2014-03-10-1)

Release date:
Updated on:

Affected Systems:
Apple iOS <7.1
Description:
--------------------------------------------------------------------------------
Bugtraq id: 66089
CVE (CAN) ID: CVE-2013-5133, CVE-2014-1274, CVE-2014-1276, CVE-2014-1277, CVE-2014-1281, CVE-2014-1284, CVE-2014-1285

IOS is an operating system developed by Apple for mobile devices. It supports iPhone, iPod touch, iPad, and Apple TV. Apple TV is a digital multi-media machine designed, marketed, and sold by Apple.

In versions earlier than iOS 7.1, multiple security vulnerabilities exist. Attackers can exploit these vulnerabilities to perform man-in-the-middle attacks, access arbitrary files, obtain unauthorized access permissions, bypass security restrictions, and perform other attacks.

<* Source: Apple

Link: http://support.apple.com/kb/HT1222
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Apple
-----
Apple has released a Security Bulletin (APPLE-SA-2014-03-10-1) and patches for this:
APPLE-SA-2014-03-10-1: iOS 7.1
Link: http://support.apple.com/kb/HT1222