Description
An issue was discovered in certain Apple products. iOS before 11.2 is affected. The issue involves the "Mail Message Framework" component. It allows remote attackers to spoof the address bar via a crafted web site.
References
- https://support.apple.com/HT208334
- https://support.apple.com/kb/HT210721
- https://support.apple.com/kb/HT210724
- https://support.apple.com/kb/HT210722
- 20191031 APPLE-SA-2019-10-29-1 iOS 13.2 and iPadOS 13.2 mailing-list
- 20191031 APPLE-SA-2019-10-29-4 watchOS 6.1 mailing-list
- 20191031 APPLE-SA-2019-10-29-2 macOS Catalina 10.15.1, Security Update 2019-001 Mojave, Security Update 2019-006 High Sierra mailing-list