John Whitehead

باحث منThe New York Times
#20248من 60,594
15.3إجمالي CVSS
الثغرات · 3
متوسطة
3
PT-2017-17536
2017-10-23
5.3
CVE-2017-7141
Apple
Mail
The issue involves the `Mail` component and allows remote attackers to bypass an intended off value of the `Load remote content in messages` setting. This enables attackers to discover an e-mail recipient's IP address via an HTML email message.
PT-2015-4097
2015-01-30
5.0
CVE-2014-8831
Apple
Os X
The issue allows attackers to read group-ACL-restricted keychain items of arbitrary apps via a crafted app with a signature from a self-signed certificate or Developer ID certificate.
PT-2015-4105
2015-01-30
5.0
CVE-2014-8839
Apple
Os X
The issue allows remote attackers to discover recipient IP addresses by including an inline image in an HTML e-mail message and logging HTTP requests for this image's URL, due to the failure of Spotlight to enforce the Mail "Load remote content in messages" configuration.