Tao (Lenx) Wei

Researcher fromFireEye, Inc.
#18161of 60,401
17.2Total CVSS
Vulnerabilities · 4
Medium
4
PT-2015-2091
2015-09-18
4.3
CVE-2015-5837
Apple
Ios
The issue exists due to insufficient input validation in the PluginKit component of the iOS operating system. This allows a remote attacker to bypass the app review process and install arbitrary extensions using a specially crafted enterprise app.
PT-2015-2106
2015-09-18
4.3
CVE-2015-5856
Apple
Ios
The issue is related to errors in security settings within the Application Store component. It allows remote attackers to cause a denial of service to an enterprise-signed app via a crafted ITMS URL.
PT-2015-6320
2015-07-03
4.3
CVE-2015-3722
Apple
Ios
The issue allows attackers to cause a denial of service, specifically an ID collision and launch outage, by utilizing a crafted universal provisioning profile app. This is due to the Application Store in Apple iOS not ensuring the uniqueness of bundle IDs.
PT-2015-6323
2015-07-03
4.3
CVE-2015-3725
Apple
Ios
The issue allows attackers to cause a denial of service, specifically an ID collision and Watch launch outage, by using a crafted universal provisioning profile app. This is due to the MobileInstallation component not ensuring the uniqueness of Watch bundle IDs.