Angelo Prado

**Name of the Vulnerable Software and Affected Versions** Resin Pro versions prior to 4.0.40 **Description** The issue concerns the ISO-8859-1 encoder, which does not properly perform Unicode transformations. This allows remote attackers to bypass intended text restrictions by using crafted characters. For example, it can be used to bypass an XSS protection mechanism. **Recommendations** For versions prior to 4.0.40, update to version 4.0.40 or later to resolve the issue. As a temporary workaround, consider restricting the input of crafted characters to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 6 **Description** The issue arises from the improper handling of reuse of Content-ID header values in Mail, allowing remote attackers to spoof attachments via a header value that was also used in a previous e-mail message. This can be demonstrated by a message from a different sender. **Recommendations** For versions prior to 6, update to a version 6 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 6 **Description** The issue is related to the improper implementation of the Data Protection feature for e-mail attachments in Mail, allowing physically proximate attackers to bypass the intended passcode requirement. **Recommendations** For Apple iOS versions prior to 6, update to a version that contains a fix for this issue, as the specific fix version is not provided in the available data.