Apple Xcode Two Vulnerabilities
Last Update Date:
27 Jul 2012 13:55
Release Date:
27 Jul 2012
5015
Views
RISK: High Risk
TYPE: Clients - Productivity Products
A vulnerability have been identified in Apple Xcode, which can be exploited by malicious people to disclose potentially sensitive information, hijack a user's session, and bypass certain security restrictions.
A design error exists within the implementation of SSL 3.0 and TLS 1.0 protocols.
An error within the designated requirement (DR) implementation allows App Store apps to access keychain items of Helper tools built with Xcode.
Impact
- Security Restriction Bypass
- Information Disclosure
System / Technologies affected
- Apple Xcode versions prior to 4.4.
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- Update to version 4.4 via the Apple Developer site or via the App Store.
Vulnerability Identifier
Source
Related Link
Share with