CVE-2012-3698

Apple Xcode before 4.4 does not properly compose a designated requirement (DR) during signing of programs that lack bundle identifiers, which allows remote attackers to read keychain entries via a crafted app, as demonstrated by the keychain entries of a (1) helper tool or (2) command-line tool.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:apple:xcode:4.1.1:*:*:*:*:*:*:*
cpe:2.3:a:apple:xcode:4.0.2:*:*:*:*:*:*:*
cpe:2.3:a:apple:xcode:4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:apple:xcode:4.0:*:*:*:*:*:*:*
cpe:2.3:a:apple:xcode:2.4.0:*:*:*:*:*:*:*
cpe:2.3:a:apple:xcode:2.3.0:*:*:*:*:*:*:*
cpe:2.3:a:apple:xcode:1.5.0:*:*:*:*:*:*:*
cpe:2.3:a:apple:xcode:2.0.0:*:*:*:*:*:*:*
cpe:2.3:a:apple:xcode:*:*:*:*:*:*:*:*
cpe:2.3:a:apple:xcode:4.3.1:*:*:*:*:*:*:*
cpe:2.3:a:apple:xcode:3.2.4:*:*:*:*:*:*:*
cpe:2.3:a:apple:xcode:2.2.0:*:*:*:*:*:*:*
cpe:2.3:a:apple:xcode:3.1.4:*:*:*:*:*:*:*
cpe:2.3:a:apple:xcode:3.1.3:*:*:*:*:*:*:*
cpe:2.3:a:apple:xcode:4.2.1:*:*:*:*:*:*:*
cpe:2.3:a:apple:xcode:3.1:*:*:*:*:*:*:*
cpe:2.3:a:apple:xcode:3.2.3:*:*:*:*:*:*:*
cpe:2.3:a:apple:xcode:3.1.1:*:*:*:*:*:*:*
cpe:2.3:a:apple:xcode:4.3:*:*:*:*:*:*:*
cpe:2.3:a:apple:xcode:2.4.1:*:*:*:*:*:*:*
cpe:2.3:a:apple:xcode:4.3.2:*:*:*:*:*:*:*
cpe:2.3:a:apple:xcode:3.2.1:*:*:*:*:*:*:*
cpe:2.3:a:apple:xcode:3.1.2:*:*:*:*:*:*:*
cpe:2.3:a:apple:xcode:2.1.0:*:*:*:*:*:*:*
cpe:2.3:a:apple:xcode:3.2.2:*:*:*:*:*:*:*
cpe:2.3:a:apple:xcode:3.2.5:*:*:*:*:*:*:*
cpe:2.3:a:apple:xcode:4.2:*:*:*:*:*:*:*

Information

Published : 2012-07-26 12:55

Updated : 2012-07-30 21:00


NVD link : CVE-2012-3698

Mitre link : CVE-2012-3698


JSON object : View

CWE
CWE-264

Permissions, Privileges, and Access Controls

Advertisement

dedicated server usa

Products Affected

apple

  • xcode