CVE-2012-0641 in Apple iOS
Résumé (Anglaise)
CFNetwork in Apple iOS before 5.1 does not properly construct request headers during parsing of URLs, which allows remote attackers to obtain sensitive information via a malformed URL, a different vulnerability than CVE-2011-3447.
Réserver
12/01/2012
Divulgation
08/03/2012
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 4790 | Apple iOS CFNetwork URL élévation de privilèges | 20 | Preuve de concept | Correctif officiel | CVE-2012-0641 |