Description (CNA)
Yandex Browser for iOS before 16.10.0.2357 does not properly restrict processing of facetime:// URLs, which allows remote attackers to initiate facetime-call without user's approval and obtain video and audio data from a device via a crafted web site.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Yandex N.V. / Yandex Browser for iOS | affected before 16.10.0.2357 for iOS |
CWE
No CWE identifiers supplied.
References
- https://yandex.com/blog/security-changelogs/fixed-in-version-16-10
- http://www.securityfocus.com/bid/96517
ADP enrichment
No English description supplied.