Description
Application Sandbox in Apple iPod touch 2.0 through 2.0.2, and iPhone 2.0 through 2.0.2, does not properly isolate third-party applications, which allows attackers to read arbitrary files in a third-party application's sandbox via a different third-party application.
References
- ADV-2008-2525 vdb-entry
- 1020846 vdb-entry
- http://support.apple.com/kb/HT3026
- http://support.apple.com/kb/HT3129
- APPLE-SA-2008-09-12 vendor-advisory
- 31823 third-party-advisory
- ADV-2008-2558 vdb-entry
- 31900 third-party-advisory
- 31092 vdb-entry
- APPLE-SA-2008-09-09 vendor-advisory