Knowledge base

About the security content of iOS 5 Software Update

Posted in Apple Mac OS

WebKit

Available for: iOS 3.0 through 4.3.5 for iPhone 3GS and iPhone 4, iOS 3.1 through 4.3.5 for iPod touch (3rd generation) and later, iOS 3.2 through 4.3.5 for iPad

Impact: Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution

Description: Multiple memory corruption issues existed in WebKit.

CVE-ID

CVE-2011-0218 : SkyLined of Google Chrome Security Team

CVE-2011-0221 : Abhishek Arya (Inferno) of Google Chrome Security Team

CVE-2011-0222 : Nikita Tarakanov and Alex Bazhanyuk of the CISS Research Team, and Abhishek Arya (Inferno) of Google Chrome Security Team

CVE-2011-0225 : Abhishek Arya (Inferno) of Google Chrome Security Team

CVE-2011-0232 : J23 working with TippingPoint's Zero Day Initiative

CVE-2011-0233 : wushi of team509 working with TippingPoint's Zero Day Initiative

CVE-2011-0234 : Rob King working with TippingPoint's Zero Day Initiative, wushi of team509 working with TippingPoint's Zero Day Initiative

CVE-2011-0235 : Abhishek Arya (Inferno) of Google Chrome Security Team

CVE-2011-0238 : Adam Barth of Google Chrome Security Team

CVE-2011-0254 : An anonymous researcher working with TippingPoint's Zero Day Initiative

CVE-2011-0255 : An anonymous reporter working with TippingPoint's Zero Day Initiative

CVE-2011-0981 : Rik Cabanier of Adobe Systems, Inc

CVE-2011-0983 : Martin Barbella

CVE-2011-1109 : Sergey Glazunov

CVE-2011-1114 : Martin Barbella

CVE-2011-1115 : Martin Barbella

CVE-2011-1117 : wushi of team509

CVE-2011-1121 : miaubiz

CVE-2011-1188 : Martin Barbella

CVE-2011-1203 : Sergey Glazunov

CVE-2011-1204 : Sergey Glazunov

CVE-2011-1288 : Andreas Kling of Nokia

CVE-2011-1293 : Sergey Glazunov

CVE-2011-1296 : Sergey Glazunov

CVE-2011-1449 : Marek Majkowski

CVE-2011-1451 : Sergey Glazunov

CVE-2011-1453 : wushi of team509 working with TippingPoint's Zero Day Initiative

CVE-2011-1457 : John Knottenbelt of Google

CVE-2011-1462 : wushi of team509

CVE-2011-1797 : wushi of team509

CVE-2011-2338 : Abhishek Arya (Inferno) of Google Chrome Security Team using AddressSanitizer

CVE-2011-2339 : Cris Neckar of the Google Chrome Security Team

CVE-2011-2341 : Apple

CVE-2011-2351 : miaubiz

CVE-2011-2352 : Apple

CVE-2011-2354 : Apple

CVE-2011-2356 : Adam Barth and Abhishek Arya of Google Chrome Security Team using AddressSanitizer

CVE-2011-2359 : miaubiz

CVE-2011-2788 : Mikolaj Malecki of Samsung

CVE-2011-2790 : miaubiz

CVE-2011-2792 : miaubiz

CVE-2011-2797 : miaubiz

CVE-2011-2799 : miaubiz

CVE-2011-2809 : Abhishek Arya (Inferno) of Google Chrome Security Team

CVE-2011-2813 : Cris Neckar of Google Chrome Security Team using AddressSanitizer

CVE-2011-2814 : Abhishek Arya (Inferno) of Google Chrome Security Team using AddressSanitizer

CVE-2011-2816 : Apple

CVE-2011-2817 : Abhishek Arya (Inferno) of Google Chrome Security Team using AddressSanitizer

CVE-2011-2818 : Martin Barbella

CVE-2011-2820 : Raman Tenneti and Philip Rogers of Google

CVE-2011-2823 : SkyLined of Google Chrome Security Team

CVE-2011-2827 : miaubiz

CVE-2011-2831 : Abhishek Arya (Inferno) of Google Chrome Security Team using AddressSanitizer

CVE-2011-3232 : Aki Helin of OUSPG

CVE-2011-3234 : miaubiz

CVE-2011-3235 : Dimitri Glazkov, Kent Tamura, Dominic Cooney of the Chromium development community, and Abhishek Arya (Inferno) of Google Chrome Security Team

CVE-2011-3236 : Abhishek Arya (Inferno) of Google Chrome Security Team using AddressSanitizer

CVE-2011-3237 : Dimitri Glazkov, Kent Tamura, Dominic Cooney of the Chromium development community, and Abhishek Arya (Inferno) of Google Chrome Security Team

CVE-2011-3244 : vkouchna

Read more http://support.apple.com/kb/HT4999