Описание
Application Sandbox in Apple iOS before 4 on the iPhone and iPod touch does not prevent photo-library access, which might allow remote attackers to obtain location information via unspecified vectors.
Ссылки
- Mailing ListVendor Advisory
- Vendor Advisory
- Third Party AdvisoryVDB Entry
- VDB Entry
- Mailing ListVendor Advisory
- Vendor Advisory
- Third Party AdvisoryVDB Entry
- VDB Entry
Уязвимые конфигурации
Конфигурация 1Версия до 4.0 (исключая)
Одновременно
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Одно из
cpe:2.3:h:apple:ipod_touch:-:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
EPSS
Процентиль: 64%
0.00479
Низкий
5 Medium
CVSS2
Дефекты
CWE-264
Связанные уязвимости
github
больше 3 лет назад
Application Sandbox in Apple iOS before 4 on the iPhone and iPod touch does not prevent photo-library access, which might allow remote attackers to obtain location information via unspecified vectors.
EPSS
Процентиль: 64%
0.00479
Низкий
5 Medium
CVSS2
Дефекты
CWE-264