Description
The Sandbox Profiles subsystem in Apple iOS before 8.1.1 does not properly implement the debugserver sandbox, which allows attackers to bypass intended binary-execution restrictions via a crafted application that is run during a time period when debugging is not enabled.
References
- APPLE-SA-2014-11-17-1 vendor-advisory
- appleios-cve20144457-sec-bypass(98777) vdb-entry
- https://support.apple.com/en-us/HT6590
- 71143 vdb-entry
- 1031232 vdb-entry
- https://support.apple.com/en-us/HT204418