Skip to content
OpenAdvisories
Unscored CVE-2012-3733 EUVD-2012-3680GHSA-4p57-32hf-84wc

Messages in Apple iOS before 6, when multiple iMessage e-mail addresses are configured, does not ensure that a reply's sender address match…

Published Sep 20, 2012 · Updated Aug 6, 2024 · Assigned by apple

Description

Messages in Apple iOS before 6, when multiple iMessage e-mail addresses are configured, does not ensure that a reply's sender address matches the recipient address of the original message, which allows remote attackers to obtain potentially sensitive information about alternate e-mail addresses in opportunistic circumstances by reading a reply.

References