Description
NSXMLParser in Foundation in Apple iOS before 8 allows attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
References
- 69905 vdb-entry
- http://support.apple.com/kb/HT6441
- 1030866 vdb-entry
- 69882 vdb-entry
- appleios-cve20144374-info-disc(96077) vdb-entry
- APPLE-SA-2014-09-17-1 vendor-advisory
- http://support.apple.com/kb/HT6443