EUVD-2015-3829

Malware in sbrugna...

Details Surface on Patched Sandbox Violation Vulnerability in iOS

Apple patched an issue last week in iOS that could have allowed attackers to bypass the third-party app-sandbox protection mechanism on devices and read arbitrary managed preferences via a special app. The issue, which was present in versions of iOS prior to 8.4.1, stems from a vulnerability with...

CVE-2015-5749

The Sandboxprofiles component in Apple iOS before 8.4.1 allows attackers to bypass the third-party app-sandbox protection mechanism and read arbitrary managed preferences via a crafted app...

CVE-2015-3793

CFPreferences in Apple iOS before 8.4.1 allows attackers to bypass the third-party app-sandbox protection mechanism and read arbitrary managed preferences via a crafted app...

Design/Logic Flaw

CFPreferences in Apple iOS before 8.4.1 allows attackers to bypass the third-party app-sandbox protection mechanism and read arbitrary managed preferences via a crafted app...

PT-2015-1891

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.4.1 Description The issue concerns a flaw in the CFPreferences component of the iOS operating system, related to insufficient access restrictions to certain functions. This flaw can be exploited by a remote attack...

CVE-2015-5749: Exposure of Sensitive Information to an Unauthorized Actor

The Sandboxprofiles component in Apple iOS before 8.4.1 allows attackers to bypass the third-party app-sandbox protection mechanism and read arbitrary managed preferences via a crafted app...

CVE-2015-3793: Undefined Security Weakness

CFPreferences in Apple iOS before 8.4.1 allows attackers to bypass the third-party app-sandbox protection mechanism and read arbitrary managed preferences via a crafted app...

PT-2015-1907

Name of the Vulnerable Software and Affected Versions iOS versions prior to 8.4.1 Description The issue concerns the Sandbox profiles component, which lacks proper protection of service data. This allows attackers to bypass the third-party app-sandbox protection mechanism. By using a crafted app,...