CVE Vulnerabilities

CVE-2012-3698

Published: Jul 26, 2012 | Modified: Jul 31, 2012
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

Apple Xcode before 4.4 does not properly compose a designated requirement (DR) during signing of programs that lack bundle identifiers, which allows remote attackers to read keychain entries via a crafted app, as demonstrated by the keychain entries of a (1) helper tool or (2) command-line tool.

Affected Software

Name Vendor Start Version End Version
Xcode Apple 1.5.0 1.5.0
Xcode Apple 2.0.0 2.0.0
Xcode Apple 2.1.0 2.1.0
Xcode Apple 2.2.0 2.2.0
Xcode Apple 2.3.0 2.3.0
Xcode Apple 2.4.0 2.4.0
Xcode Apple 2.4.1 2.4.1
Xcode Apple 3.1 3.1
Xcode Apple 3.1.1 3.1.1
Xcode Apple 3.1.2 3.1.2
Xcode Apple 3.1.3 3.1.3
Xcode Apple 3.1.4 3.1.4
Xcode Apple 3.2.1 3.2.1
Xcode Apple 3.2.2 3.2.2
Xcode Apple 3.2.3 3.2.3
Xcode Apple 3.2.4 3.2.4
Xcode Apple 3.2.5 3.2.5
Xcode Apple 4.0 4.0
Xcode Apple 4.0.1 4.0.1
Xcode Apple 4.0.2 4.0.2
Xcode Apple 4.1.1 4.1.1
Xcode Apple 4.2 4.2
Xcode Apple 4.2.1 4.2.1
Xcode Apple 4.3 4.3
Xcode Apple 4.3.1 4.3.1
Xcode Apple 4.3.2 4.3.2
Xcode Apple * 4.3.3

References