Vulnerabilities > CVE-2015-3722 - 7PK - Security Features vulnerability in Apple Iphone OS
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
Application Store in Apple iOS before 8.4 does not ensure the uniqueness of bundle IDs, which allows attackers to cause a denial of service (ID collision and launch outage) via a crafted universal provisioning profile app.
Vulnerable Configurations
Common Weakness Enumeration (CWE)
References
- http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html
- http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html
- http://support.apple.com/kb/HT204941
- http://support.apple.com/kb/HT204941
- http://www.securityfocus.com/bid/75490
- http://www.securityfocus.com/bid/75490
- http://www.securitytracker.com/id/1032761
- http://www.securitytracker.com/id/1032761