Code injection

2017-03-0115:59:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

57.0%

JSON

Yandex Browser for iOS before 16.10.0.2357 does not properly restrict processing of facetime:// URLs, which allows remote attackers to initiate facetime-call without user’s approval and obtain video and audio data from a device via a crafted web site.

CPENameOperatorVersion
yandex_browserlt16.10.0.2357

CPE	Name	Operator	Version
	yandex_browser	lt	16.10.0.2357

References

www.securityfocus.com/bid/96517

yandex.com/blog/security-changelogs/fixed-in-version-16-10