Description
Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 mishandle signed disk images, which allows attackers to execute arbitrary code in a privileged context via a crafted app.
References
- https://support.apple.com/HT207141
- 1036858 vdb-entry
- APPLE-SA-2016-09-20 vendor-advisory
- APPLE-SA-2016-09-20-3 vendor-advisory
- 93059 vdb-entry
- APPLE-SA-2016-09-20-5 vendor-advisory
- APPLE-SA-2016-09-20-6 vendor-advisory
- https://support.apple.com/HT207170
- https://support.apple.com/HT207142
- https://support.apple.com/HT207143