Description
The XPC Services API in LaunchServices in Apple iOS before 9.3 allows attackers to bypass intended event-handler restrictions and modify an arbitrary app's events via a crafted app.
References
- 1035353 vdb-entry
- APPLE-SA-2016-03-21-1 vendor-advisory
- https://support.apple.com/HT206166