Adi Sharabani

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 9.2.1 **Description** The issue is related to the WebSheet component in the iOS operating system, which lacks protection for certain internal data. This can be exploited by a remote attacker using a specially crafted captive portal to read or write data in cookies. **Recommendations** For versions prior to 9.2.1, update to version 9.2.1 or later to resolve the issue. As a temporary workaround, consider restricting access to captive portals to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 9.0.3 iOS versions prior to 9.2.1 **Description** The issue is related to the Cascading Style Sheets (CSS) implementation, which mishandles the `a:visited button` selector during height processing. This makes it easier for remote attackers to obtain sensitive browser-history information via a crafted web site. The vulnerability is associated with a lack of protection for internal data, allowing a remote attacker to access browser history using a specially formed web site. **Recommendations** For Safari versions prior to 9.0.3, update to version 9.0.3 or later. For iOS versions prior to 9.2.1, update to version 9.2.1 or later.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 7.1 Apple TV versions prior to 6.1 **Description** The issue allows attackers to bypass intended configuration-profile visibility requirements via a long name in the Profiles component. **Recommendations** For Apple iOS versions prior to 7.1, update to version 7.1 or later. For Apple TV versions prior to 6.1, update to version 6.1 or later.

**Name of the Vulnerable Software and Affected Versions** Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 **Description** The issue concerns the URL parser in Microsoft Internet Information Services (IIS) 5.1, allowing remote attackers to execute arbitrary code. This is achieved through multiple requests to ".dll" followed by specific arguments, such as `~0` through `~9`, which causes ntdll.dll to produce a return value that IIS does not handle correctly. An example of such a request is "/ vti bin/.dll/*/~0". Initially, it was believed that the consequence of this issue would only be a denial of service, resulting in an application crash and reboot. **Recommendations** For Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2, consider restricting access to the URL parser or applying specific configuration changes to handle the return value from ntdll.dll correctly until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.