medium6.2
CVE-2016-1760
The XPC Services API in LaunchServices in Apple iOS before 9.3 allows attackers to bypass intended event-handler restrictions and modify an arbitrary app's eve…
Impact
The XPC Services API in LaunchServices in Apple iOS before 9.3 allows attackers to bypass intended event-handler restrictions and modify an arbitrary app's events via a crafted app.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Iphone Os | through 9.2.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html
- http://www.securitytracker.com/id/1035353
- https://support.apple.com/HT206166
- http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html
- http://www.securitytracker.com/id/1035353
- https://support.apple.com/HT206166