CVE-2017-2414

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "DataAccess" component. It allows remote attackers to access Exchange traffic in opportunistic circumstances by leveraging a mistake in typing an e-mail address...

CVE-2017-2414

CVE-2017-2414 affects Apple iOS prior to 10.3, in the DataAccess component. The issue is an input-validation flaw in handling Exchange email addresses, which could cause a mistyped address to resolve to an unintended Exchange server and expose traffic. Apple’s security note confirms the vulnerabi...