Unscored CVE-2015-1062 EUVD-2015-1205GHSA-cpvf-4x77-j58p

MobileStorageMounter in Apple iOS before 8.2 and Apple TV before 7.1 does not delete invalid disk-image folders, which allows attackers to …

Published Mar 12, 2015 · Updated Aug 6, 2024 · Assigned by apple

Description

MobileStorageMounter in Apple iOS before 8.2 and Apple TV before 7.1 does not delete invalid disk-image folders, which allows attackers to create folders in arbitrary filesystem locations via a crafted app.

References

APPLE-SA-2015-03-09-2 vendor-advisory
https://support.apple.com/HT204426
APPLE-SA-2015-03-09-1 vendor-advisory
1031864 vdb-entry
https://support.apple.com/HT204423