CVE-2014-8840

CVE-2014-8840 affects the iTunes Store component in Apple iOS prior to 8.1.3, where a website redirect from Safari to the iTunes Store could bypass Safari’s sandbox protection. The root cause is improper handling of SSL URL redirects to the iTunes Store, enabling a remote attacker to bypass sandb...