EUVD-2015-3761

Malware in sbrugna...

The vulnerability of the MobileInstallation component in operating systems such as tvOS, iOS, iPadOS, and watchOS allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the MobileInstallation component in operating systems such as tvOS, iOS, iPadOS, and watchOS is related to deficiencies in system boundary enforcement. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

Apple watchOS 安全漏洞

Apple watchOS is an operating system for smartwatches from Apple. A security vulnerability exists in watchOS, which originates in the MobileInstallation component. A local user can modify protected portions of the file system and escalate privileges. The vulnerability allows a local user to...

Apple iOS < 8.4.1 Multiple Vulnerabilities

Binary data 8978.prm...

CVE-2015-5770

MobileInstallation in Apple iOS before 8.4.1 does not ensure the uniqueness of universal provisioning profile bundle IDs, which allows attackers to replace arbitrary extensions via a crafted enterprise app...

Information disclosure

MobileInstallation in Apple iOS before 8.4.1 does not ensure the uniqueness of universal provisioning profile bundle IDs, which allows attackers to replace arbitrary extensions via a crafted enterprise app...

CVE-2015-5770

MobileInstallation in Apple iOS before 8.4.1 does not ensure the uniqueness of universal provisioning profile bundle IDs, which allows attackers to replace arbitrary extensions via a crafted enterprise app...

CVE-2015-5770

CVE-2015-5770 affects Apple iOS prior to 8.4.1 in MobileInstallation. The vulnerability stems from non-unique universal provisioning profile bundle IDs, enabling an attacker to replace extensions for other apps via a crafted enterprise app. Affected component: MobileInstallation logic handling un...

Apple iOS < 8.4.1 Multiple Vulnerabilities

Binary data appleios841check.nbin...

CVE-2015-3725

MobileInstallation in Apple iOS before 8.4 does not ensure the uniqueness of Watch bundle IDs, which allows attackers to cause a denial of service ID collision and Watch launch outage via a crafted universal provisioning profile app...

CVE-2015-3725

CVE-2015-3725 affects MobileInstallation in iOS

CVE-2014-4493

The app-installation functionality in MobileInstallation in Apple iOS before 8.1.3 allows attackers to obtain control of the local app container by leveraging access to an enterprise distribution certificate for signing a crafted app...

Design/Logic Flaw

The app-installation functionality in MobileInstallation in Apple iOS before 8.1.3 allows attackers to obtain control of the local app container by leveraging access to an enterprise distribution certificate for signing a crafted app...

CVE-2014-4493

The app-installation functionality in MobileInstallation in Apple iOS before 8.1.3 allows attackers to obtain control of the local app container by leveraging access to an enterprise distribution certificate for signing a crafted app...

CVE-2014-4493

CVE-2014-4493 affects Apple iOS prior to 8.1.3. The vulnerability exists in the app-installation flow of MobileInstallation, where an enterprise-signed, crafted app could gain control of the local app container for apps already on the device. This could enable an attacker to influence installed a...