Description
The iTunes Store component in Apple iOS before 8.1.3 allows remote attackers to bypass a Safari sandbox protection mechanism by leveraging redirection of an SSL URL to the iTunes Store.
References
- http://support.apple.com/HT204245
- http://zerodayinitiative.com/advisories/ZDI-15-010/
- appleios-cve20148840-sec-bypass(100533) vdb-entry
- APPLE-SA-2015-01-27-2 vendor-advisory
- 1031652 vdb-entry