Apple iOS Sandbox_profiles Component Information Disclosure Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS has a security vulnerability that allows malicious apps to utilize third-party app sandbox profiles to read information about other apps' administrative parameters...

CVE-2015-1114

The Sandbox Profiles component in Apple iOS before 8.3 and Apple TV before 7.2 allows attackers to discover hardware identifiers via a crafted app...

CVE-2015-1113

The Sandbox Profiles component in Apple iOS before 8.3 allows attackers to read the 1 telephone number or 2 e-mail address of a recent contact via a crafted app...

Code injection

The Sandbox Profiles component in Apple iOS before 8.3 and Apple TV before 7.2 allows attackers to discover hardware identifiers via a crafted app...

Code injection

The Sandbox Profiles component in Apple iOS before 8.3 allows attackers to read the 1 telephone number or 2 e-mail address of a recent contact via a crafted app...

CVE-2015-1113

The Sandbox Profiles component in Apple iOS before 8.3 allows attackers to read the 1 telephone number or 2 e-mail address of a recent contact via a crafted app...

CVE-2015-1114

The CVE-2015-1114 issue affects Apple iOS prior to 8.3 and Apple TV prior to 7.2, where the Sandbox Profiles component could disclose hardware identifiers to third‑party apps. Root cause: information disclosure via the Sandbox third‑party profile. Impact: hardware identifiers exposed to potential...

CVE-2015-1114

The Sandbox Profiles component in Apple iOS before 8.3 and Apple TV before 7.2 allows attackers to discover hardware identifiers via a crafted app...

CVE-2015-1113

CVE-2015-1113 affects Apple iOS (Sandbox Profiles). A vulnerability in the third-party app sandbox allowed a crafted app to disclose the user’s recent contact data — specifically the phone number and email address. The issue stems from information-disclosure in Sandbox Profiles, and is addressed ...

Apple iOS < 8.3 Multiple Vulnerabilities

Binary data appleios83check.nbin...

Apple iOS 8.x < 8.1.1 Multiple Vulnerabilities.

Binary data 8940.prm...

Apple Patches Thunderstrike Bug in OSX, Fixes More Than 30 Flaws in iOS

Apple has released major security updates for both OS X and iOS that includes patches for a number of bugs that could lead to arbitrary code execution. The release of iOS 8.1.3 fixes a vulnerability that allowed an attacker to bypass the sandbox restrictions in Safari and the OS X update fixes a...

APPLE-SA-2014-11-17-1 iOS 8.1.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-11-17-1 iOS 8.1.1 iOS 8.1.1 is now available and addresses the following: CFNetwork Available for: iPhone 4s and later, iPod touch 5th generation and later, iPad 2 and later Impact: Website cache may not be fully cleared after leaving...

CVE-2014-4457

The Sandbox Profiles subsystem in Apple iOS before 8.1.1 does not properly implement the debugserver sandbox, which allows attackers to bypass intended binary-execution restrictions via a crafted application that is run during a time period when debugging is not enabled...

CVE-2014-4457

The CVE-2014-4457 entry affects Apple iOS up to version 8.1.1, specifically the Sandbox Profiles subsystem. The debugserver sandbox was not properly implemented, enabling bypass of binary-execution restrictions when a crafted app runs during periods when debugging is not enabled. The documented i...

CVE-2014-4362

The Sandbox Profiles implementation in Apple iOS before 8 does not properly restrict the third-party app sandbox profile, which allows attackers to obtain sensitive Apple ID information via a crafted app...

Information disclosure

The Sandbox Profiles implementation in Apple iOS before 8 does not properly restrict the third-party app sandbox profile, which allows attackers to obtain sensitive Apple ID information via a crafted app...

CVE-2014-4362

The CVE-2014-4362 vulnerability affects Apple iOS prior to version 8, specifically the Sandbox Profiles feature. The issue is that the third-party app sandbox profile was not properly restricted, enabling a crafted app to access sensitive Apple ID information. Impact described in multiple sources...

CVE-2014-4362

The Sandbox Profiles implementation in Apple iOS before 8 does not properly restrict the third-party app sandbox profile, which allows attackers to obtain sensitive Apple ID information via a crafted app...

Apple Mac OS X Predefined Sandbox Profiles Security Bypass Vulnerability

Apple Mac OS X operating system is prone to a sandbox profiles security bypass vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...