Description
Messages in Apple iOS before 6, when multiple iMessage e-mail addresses are configured, does not ensure that a reply's sender address matches the recipient address of the original message, which allows remote attackers to obtain potentially sensitive information about alternate e-mail addresses in opportunistic circumstances by reading a reply.
References
- APPLE-SA-2012-09-19-1 vendor-advisory
- http://support.apple.com/kb/HT5503
- 85624 vdb-entry
- apple-ios-messages-cve20123733(78686) vdb-entry