GCVE - cpe:2.3:h:apple:ipad2:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:apple:ipad2:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Apple (`c2b419d0-9f0f-51c1-88dc-2e204a98e1c7`)
Product	Ipad2 (`cce7ebd8-5b8c-56c7-a54d-44b6a59b2c85`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-3955`	vulnerable	2026-06-08 05:04:33.343283	Details available The get_xattrinfo function in the XNU kernel in Apple iOS 5.x and 6.x through 6.1.3 on iPad devices does not properly validate the header of an AppleDouble file, which might allow local users to cause a denial of service (memory corruption) or have unspecified other impact via an invalid file on an msdosfs filesystem. Published: 2013-06-05T10:00:00.000Z Updated: 2024-08-06T16:30:48.225Z Open on db.gcve.eu Reference links http://www.syscan.org/index.php/sg/program/day/2 http://www.securitytracker.com/id/1029054 http://antid0te.com/syscan_2013/SyScan2013_Mountain_Lion_iOS_Vulnerabilities_Garage_Sale_Whitepaper.pdf http://support.apple.com/kb/HT5934 http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2899`	not_vulnerable	2026-06-08 05:02:07.060515	Details available Google Chrome before 21.0.1180.82 on iOS makes certain incorrect calls to WebView methods that trigger use of an applewebdata: URL, which allows remote attackers to bypass the Same Origin Policy and conduct Universal XSS (UXSS) attacks via vectors involving the document.write method. Published: 2014-01-05T20:00:00.000Z Updated: 2024-08-06T19:50:05.189Z Open on db.gcve.eu Reference links https://code.google.com/p/chromium/issues/detail?id=147625 http://googlechromereleases.blogspot.com/2012/09/chrome-for-ios-update_24.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2898`	not_vulnerable	2026-06-08 05:02:07.059130	Details available Google Chrome before 21.0.1180.82 on iOS on iPad devices allows remote attackers to spoof the Omnibox URL via vectors involving SSL error messages, a related issue to CVE-2012-0674. Published: 2014-01-05T20:00:00.000Z Updated: 2024-08-06T19:50:04.663Z Open on db.gcve.eu Reference links http://googlechromereleases.blogspot.com/2012/09/chrome-for-ios-update_24.html https://code.google.com/p/chromium/issues/detail?id=146760	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.