Security Advisory

CVE-2016-8507

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-03-01 15:00:00

Last updated 2024-08-06 02:27:40

Assigner yandex

CVSS score not scored

State PUBLISHED

Description

Yandex Browser for iOS before 16.10.0.2357 does not properly restrict processing of facetime:// URLs, which allows remote attackers to initiate facetime-call without user's approval and obtain video and audio data from a device via a crafted web site.

← Browse all CVEs View on cve.org ↗