4 matches found
CVE-2015-5780
The Safari Extensions implementation in Apple Safari before 9 does not require user confirmation before replacing an installed extension, which has unspecified impact and attack vectors...
Apple Safari Extension Replacement Vulnerability
Apple Safari is a WEB browser. A security vulnerability exists in Apple Safari that allows remote attackers to exploit a vulnerability to trick users into parsing, replaceable extensions...
iOS Extension Replacement
The vulnerability of the MobileInstallation component in the iOS operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to replace arbitrary extensions using a specially crafted application...
CVE-2015-5770: Undefined Security Weakness
MobileInstallation in Apple iOS before 8.4.1 does not ensure the uniqueness of universal provisioning profile bundle IDs, which allows attackers to replace arbitrary extensions via a crafted enterprise app...