GCVE - cpe:2.3:o:apple:iphone_os:4.3.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:apple:iphone_os:4.3.4:*:*:*:*:*:*:*

part: o version: 4.3.4 update: *

Vendor	Apple (`c2b419d0-9f0f-51c1-88dc-2e204a98e1c7`)
Product	Iphone Os (`a8f177aa-2ee7-5c0b-9356-ee8bf462ff28`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-3442`	vulnerable	2026-06-08 04:59:25.604044	Details available The kernel in Apple iOS before 5.0.1 does not ensure the validity of flag combinations for an mmap system call, which allows local users to execute arbitrary unsigned code via a crafted app. Published: 2011-11-11T18:00:00.000Z Updated: 2024-08-06T23:37:47.521Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1026287 http://lists.apple.com/archives/Security-announce/2011/Nov/msg00001.html http://support.apple.com/kb/HT5052	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3441`	vulnerable	2026-06-08 04:59:25.599757	Details available libinfo in Apple iOS before 5.0.1 does not properly formulate domain-name queries, which allows remote attackers to obtain sensitive information via a crafted DNS hostname. Published: 2011-11-11T18:00:00.000Z Updated: 2024-08-06T23:37:47.780Z Open on db.gcve.eu Reference links http://support.apple.com/kb/HT5130 http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html http://lists.apple.com/archives/Security-announce/2011/Nov/msg00001.html http://support.apple.com/kb/HT5052	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3440`	vulnerable	2026-06-08 04:59:25.566585	Details available The Passcode Lock feature in Apple iOS before 5.0.1 on the iPad 2 does not properly implement the locked state, which allows physically proximate attackers to access data by opening a Smart Cover during power-off confirmation. Published: 2011-11-11T18:00:00.000Z Updated: 2024-09-16T19:09:29.634Z Open on db.gcve.eu Reference links http://lists.apple.com/archives/Security-announce/2011/Nov/msg00001.html http://support.apple.com/kb/HT5052	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3254`	vulnerable	2026-06-08 04:59:23.592464	Details available Cross-site scripting (XSS) vulnerability in Calendar in Apple iOS before 5 allows remote attackers to inject arbitrary web script or HTML via an invitation note. Published: 2011-10-14T10:00:00.000Z Updated: 2024-09-17T01:26:04.725Z Open on db.gcve.eu Reference links http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html http://support.apple.com/kb/HT4999	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-0228`	vulnerable	2026-06-08 04:56:36.127848	Details available The Data Security component in Apple iOS before 4.2.10 and 4.3.x before 4.3.5 does not check the basicConstraints parameter during validation of X.509 certificate chains, which allows man-in-the-middle attackers to spoof an SSL server by using a non-CA certificate to sign a certificate for an arbitrary domain. Published: 2011-08-29T20:00:00.000Z Updated: 2024-08-06T21:43:15.409Z Open on db.gcve.eu Reference links http://lists.apple.com/archives/security-announce/2011//Jul/msg00005.html https://www.trustwave.com/spiderlabs/advisories/TWSL2011-007.txt http://www.securityfocus.com/bid/48877 http://support.apple.com/kb/HT4824 http://secunia.com/advisories/45369	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.