Adi Sharabani

The issue is related to the WebSheet component in the iOS operating system, which lacks protection for certain internal data. This can be exploited by a remote attacker using a specially crafted captive portal to read or write data in cookies.

The issue is related to the Cascading Style Sheets (CSS) implementation, which mishandles the `a:visited button` selector during height processing. This makes it easier for remote attackers to obtain sensitive browser-history information via a crafted web site. The vulnerability is associated with a lack of protection for internal data, allowing a remote attacker to access browser history using a specially formed web site.

The issue allows attackers to bypass intended configuration-profile visibility requirements via a long name in the Profiles component.

The issue concerns the URL parser in Microsoft Internet Information Services (IIS) 5.1, allowing remote attackers to execute arbitrary code. This is achieved through multiple requests to ".dll" followed by specific arguments, such as `~0` through `~9`, which causes ntdll.dll to produce a return value that IIS does not handle correctly. An example of such a request is "/ vti bin/.dll/*/~0". Initially, it was believed that the consequence of this issue would only be a denial of service, resulting in an application crash and reboot.