Description
Mail in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to trigger a refresh operation, and consequently cause a visit to an arbitrary web site, via a crafted HTML e-mail message.
References
- 75491 vdb-entry
- http://support.apple.com/kb/HT204941
- APPLE-SA-2015-06-30-2 vendor-advisory
- 1032760 vdb-entry
- http://support.apple.com/kb/HT204942
- APPLE-SA-2015-06-30-1 vendor-advisory