medium5.8
CVE-2015-5770
MobileInstallation in Apple iOS before 8.4.1 does not ensure the uniqueness of universal provisioning profile bundle IDs, which allows attackers to replace arb…
Impact
MobileInstallation in Apple iOS before 8.4.1 does not ensure the uniqueness of universal provisioning profile bundle IDs, which allows attackers to replace arbitrary extensions via a crafted enterprise app.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Iphone Os | through 8.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html
- http://www.securityfocus.com/bid/76337
- http://www.securitytracker.com/id/1033275
- https://support.apple.com/kb/HT205030
- http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html
- http://www.securityfocus.com/bid/76337
- http://www.securitytracker.com/id/1033275
- https://support.apple.com/kb/HT205030