Description
Mail in Apple iOS before 7.1.2 advertises the availability of data protection for attachments but stores cleartext attachments under mobile/Library/Mail/, which makes it easier for physically proximate attackers to obtain sensitive information by mounting the data partition.
References
- http://www.andreas-kurtz.de/2014/04/what-apple-missed-to-fix-in-ios-711.html
- http://support.apple.com/kb/HT6441
- 68276 vdb-entry
- APPLE-SA-2014-06-30-3 vendor-advisory
- 67263 vdb-entry
- APPLE-SA-2014-09-17-1 vendor-advisory
- 1030500 vdb-entry