Unscored CVE-2015-3725 EUVD-2015-3761GHSA-ff32-6745-wcvq

MobileInstallation in Apple iOS before 8.4 does not ensure the uniqueness of Watch bundle IDs, which allows attackers to cause a denial of …

Published Jul 3, 2015 · Updated Aug 6, 2024 · Assigned by apple

Description

MobileInstallation in Apple iOS before 8.4 does not ensure the uniqueness of Watch bundle IDs, which allows attackers to cause a denial of service (ID collision and Watch launch outage) via a crafted universal provisioning profile app.

References

http://support.apple.com/kb/HT204941
1032761 vdb-entry
75490 vdb-entry
APPLE-SA-2015-06-30-1 vendor-advisory