Description
SpringBoard in Apple iOS before 9 does not properly restrict access to privileged API calls, which allows attackers to spoof the dialog windows of an arbitrary app via a crafted app.
References
- 1033609 vdb-entry
- https://support.apple.com/HT205212
- 76764 vdb-entry
- APPLE-SA-2015-09-16-1 vendor-advisory