Apple Mac OS X and iOS XARA Multiple Security Vulnerabilities
BID:75308
Info
Apple Mac OS X and iOS XARA Multiple Security Vulnerabilities
| Bugtraq ID: | 75308 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 18 2015 12:00AM |
| Updated: | Jun 18 2015 12:00AM |
| Credit: | Luyi Xing, Xialong Bai, XiaoFeng Wang, and Kai Chen lead by Tongxin Li, of Peking University, and Xiaojing Liao |
| Vulnerable: |
Apple iOS 0 |
| Not Vulnerable: | |
Discussion
Apple Mac OS X and iOS XARA Multiple Security Vulnerabilities
Apple Mac OS X and iOS are prone to the following security vulnerabilities:
1. An authentication-bypass vulnerability
2. A security-bypass vulnerability
3. An information-disclosure vulnerability
4. A security vulnerability
Remote attackers can exploit these issues to bypass the authentication mechanism and gain unauthorized access, bypass certain security restrictions, perform unauthorized actions, or gain access to the sensitive information that may aid in further attacks.
Apple Mac OS X and iOS are prone to the following security vulnerabilities:
1. An authentication-bypass vulnerability
2. A security-bypass vulnerability
3. An information-disclosure vulnerability
4. A security vulnerability
Remote attackers can exploit these issues to bypass the authentication mechanism and gain unauthorized access, bypass certain security restrictions, perform unauthorized actions, or gain access to the sensitive information that may aid in further attacks.
Exploit / POC
Apple Mac OS X and iOS XARA Multiple Security Vulnerabilities
The researcher who discovered these issues has created a proof-of-concept. Please see the references for more information.
The researcher who discovered these issues has created a proof-of-concept. Please see the references for more information.
Solution / Fix
Apple Mac OS X and iOS XARA Multiple Security Vulnerabilities
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Apple Mac OS X and iOS XARA Multiple Security Vulnerabilities
References:
References:
- Apple iOS Homepage (Apple)
- Mac OS X Homepage (Apple)
- Unauthorized Cross-App Resource Access on MAC OS X and iOS (University of Indiana)