First published: Fri Apr 10 2015(Updated: )
The Sandbox Profiles component in Apple iOS before 8.3 allows attackers to read the (1) telephone number or (2) e-mail address of a recent contact via a crafted app.
Credit: product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iPhone OS | <=8.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-1113 is considered a moderate severity vulnerability due to the potential exposure of sensitive user information.
CVE-2015-1113 affects Apple iOS versions prior to 8.3.
To fix CVE-2015-1113, update your device to iOS version 8.3 or later.
CVE-2015-1113 allows attackers to read the telephone number or email address of a recent contact.
CVE-2015-1113 is a local vulnerability that requires an attacker to execute a crafted app on the target device.