Description
The HTTPAuthentication implementation in CFNetwork in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted credentials in a URL.
References
- 75491 vdb-entry
- http://support.apple.com/kb/HT204941
- APPLE-SA-2015-06-30-2 vendor-advisory
- 1032760 vdb-entry
- http://support.apple.com/kb/HT204942
- APPLE-SA-2015-06-30-1 vendor-advisory