Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2016-1764] OS X Messages (iMessage): XSS & File Disclosure

bishopfox.com | advisory | CVE-2016-1764 | #macos | #advisory | #apple | #imessage | #cve-2016-1764

Summary

Official advisory for the OS X Messages (iMessage) XSS and file disclosure issue (CVE-2016-1764): a clicked JavaScript URI could leak chat history; fixed on March 21, 2016.
Published
Collected

original ↗

Related coverage

  1. If You Can't Break Crypto, Break the Client: Recovery of Plaintext iMessage Data (bishopfox.com)
  2. iMessage Privacy (blog.quarkslab.com)
  3. MacOS High Sierra: Getting to the Root of the Problem (bugcrowd.com)
  4. From Emoji to Zero-Day: Latin Homoglyphs in Domains and Subdomains (bishopfox.com)
  5. atmail 7 Stored XSS Vulnerability (bishopfox.com)
  6. Accellion Kiteworks Multiple Vulnerabilities (bishopfox.com)

back