MobileInstallation in Apple iOS before 8.4.1 does not ensure the uniqueness of universal provisioning profile bundle IDs, which allows attackers to replace arbitrary extensions via a crafted enterprise app.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Iphone_os | Apple | * | 8.4 (including) |
References
- http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html
- http://www.securityfocus.com/bid/76337
- http://www.securitytracker.com/id/1033275
- https://support.apple.com/kb/HT205030
- http://lists.apple.com/archives/security-announce/2015/Aug/msg00002.html
- http://www.securityfocus.com/bid/76337
- http://www.securitytracker.com/id/1033275
- https://support.apple.com/kb/HT205030