CVE-2016-1801 in iOS

Summary

The CFNetwork Proxies subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, and tvOS before 9.2.1 mishandles URLs in http and https requests, which allows remote attackers to obtain sensitive information via unspecified vectors.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservation

01/13/2016

Disclosure

05/20/2016

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
87493	Apple iOS CFNetwork Proxies User information disclosure	200	Not defined	Official fix	CVE-2016-1801
87442	Apple Mac OS X CFNetwork Proxies information disclosure	200	Not defined	Official fix	CVE-2016-1801

Sources

• MITRE
• NVD
• CVE Details