Open redirect

Apple iOS 6.1.3 does not follow redirects during determination of the hostname to display in an iOS Enterprise Deployment installation dialog, which makes it easier for remote attackers to trigger installation of arbitrary applications via a download-manifest itms-services:// URL that leverages a...

PT-2013-4753

Name of the Vulnerable Software and Affected Versions Apple iOS version 6.1.3 Description The issue allows remote attackers to trigger the installation of arbitrary applications via a download-manifest itms-services:// URL. This is possible because the software does not follow redirects during th...

CVE-2013-3948: Improper Input Validation

Apple iOS 6.1.3 does not follow redirects during determination of the hostname to display in an iOS Enterprise Deployment installation dialog, which makes it easier for remote attackers to trigger installation of arbitrary applications via a download-manifest itms-services:// URL that leverages a...