16 matches found
EUVD-2017-16186
Malware in sbrugna...
CVE-2017-7148
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Location Framework" component. It allows attackers to obtain sensitive location information via a crafted app that reads the location variable...
CVE-2017-7148
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Location Framework" component. It allows attackers to obtain sensitive location information via a crafted app that reads the location variable...
Design/Logic Flaw
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Location Framework" component. It allows attackers to obtain sensitive location information via a crafted app that reads the location variable...
CVE-2017-7148
CVE-2017-7148 affects the Location Framework in iOS 11-era devices, describing a permissions issue that could allow an app to read sensitive location information via a crafted app reading the location variable. The connected Apple entry notes the vulnerability as addressed by additional ownership...
CVE-2017-7148
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Location Framework" component. It allows attackers to obtain sensitive location information via a crafted app that reads the location variable...
CVE-2017-7148: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Location Framework" component. It allows attackers to obtain sensitive location information via a crafted app that reads the location variable...
PT-2017-17543
Name of the Vulnerable Software and Affected Versions iOS versions prior to 11 Description An issue in certain Apple products involves the Location Framework component, allowing attackers to obtain sensitive location information via a crafted app that reads the location variable. Recommendations...
Apple iOS Location Framework Information Disclosure Vulnerability
Apple iOS is an operating system developed by Apple for mobile devices. Location is one of the frameworks used to determine a user's location. An information disclosure vulnerability exists in the Location Framework component in versions of Apple iOS prior to 11. The vulnerability can be exploite...
Apple iOS < 8.4.1 Multiple Vulnerabilities
Binary data 8978.prm...
iOS File System Restriction Bypass
The vulnerability of the Location Framework component in the iOS operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to circumvent existing restrictions on access to file system objects through symbolic links...
CVE-2015-3759
CVE-2015-3759 affects the Apple Location Framework in iOS before 8.4.1. It describes a symbolic link vulnerability that could allow a local user to modify protected filesystem parts. The issue is addressed in iOS 8.4.1 with improved path validation to mitigate the symlink abuse. No exploit detail...
CVE-2015-3759
Location Framework in Apple iOS before 8.4.1 allows local users to bypass intended restrictions on filesystem modification via a symlink...
PT-2015-1878
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.4.1 Description The issue is related to the Location Framework component in the iOS operating system, which has inadequate access control restrictions. This allows a local attacker to bypass existing access...
CVE-2015-3759: Improper Link Resolution Before File Access
Location Framework in Apple iOS before 8.4.1 allows local users to bypass intended restrictions on filesystem modification via a symlink...