Description
CFNetwork in Apple iOS before 6 does not properly identify the host portion of a URL, which allows remote attackers to obtain sensitive information by leveraging the construction of an HTTP request with an incorrect hostname derived from a malformed URL.
References
- 85637 vdb-entry
- APPLE-SA-2012-09-19-1 vendor-advisory
- http://support.apple.com/kb/HT5503
- apple-ios-cfnetwork-cve20123724(78723) vdb-entry