Apple iPhone OS 4.2
Approved changes feed: RSS · Atom
cpe:2.3:o:apple:iphone_os:4.2:*:*:*:*:*:*:*
part: o version: 4.2 update: *
| Vendor | Apple (c2b419d0-9f0f-51c1-88dc-2e204a98e1c7) |
|---|---|
| Product | Iphone Os (a8f177aa-2ee7-5c0b-9356-ee8bf462ff28) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-3441 |
vulnerable | 2026-06-08 04:59:25.599496 |
Details available
libinfo in Apple iOS before 5.0.1 does not properly formulate domain-name queries, which allows remote attackers to obtain sensitive information via a crafted DNS hostname.
Published: 2011-11-11T18:00:00.000Z
Updated: 2024-08-06T23:37:47.780Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3440 |
vulnerable | 2026-06-08 04:59:25.566424 |
Details available
The Passcode Lock feature in Apple iOS before 5.0.1 on the iPad 2 does not properly implement the locked state, which allows physically proximate attackers to access data by opening a Smart Cover during power-off confirmation.
Published: 2011-11-11T18:00:00.000Z
Updated: 2024-09-16T19:09:29.634Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3254 |
vulnerable | 2026-06-08 04:59:23.589430 |
Details available
Cross-site scripting (XSS) vulnerability in Calendar in Apple iOS before 5 allows remote attackers to inject arbitrary web script or HTML via an invitation note.
Published: 2011-10-14T10:00:00.000Z
Updated: 2024-09-17T01:26:04.725Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1417 |
vulnerable | 2026-06-08 04:57:59.084300 |
Details available
Integer overflow in QuickLook, as used in Apple Mac OS X before 10.6.7 and MobileSafari in Apple iOS before 4.2.7 and 4.3.x before 4.3.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a Microsoft Office document with a crafted size field in the OfficeArtMetafileHeader, related to OfficeArtBlip, as demonstrated on the iPhone by Charlie Miller and Dion Blazakis during a Pwn2Own competition at CanSecWest 2011.
Published: 2011-03-11T17:00:00.000Z
Updated: 2024-08-06T22:28:40.945Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1344 |
vulnerable | 2026-06-08 04:57:58.473758 |
Details available
Use-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.5; iOS before 4.3.2 for iPhone, iPod, and iPad; iOS before 4.2.7 for iPhone 4 (CDMA); and possibly other products allows remote attackers to execute arbitrary code by adding children to a WBR tag and then removing the tag, related to text nodes, as demonstrated by Chaouki Bekrar during a Pwn2Own competition at CanSecWest 2011.
Published: 2011-03-10T20:00:00.000Z
Updated: 2024-08-06T22:21:34.205Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0226 |
vulnerable | 2026-06-08 04:56:36.109856 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-0159 |
vulnerable | 2026-06-08 04:56:35.659771 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.