The Background Story of CVE-2020-9773
ID: befeaaa3-4699-5cab-969d-9027a0f82d83
STIX ID: report--befeaaa3-4699-5cab-969d-9027a0f82d83
Feed Name: Zimperium Blog
Threat Score
This report documents CVE-2020-9773: a privacy-impacting iOS vulnerability in the LSD icon cache that allowed any sandboxed app to read cached icons from a globally readable folder (/private/var/containers/Shared/SystemGroup/systemgroup.com.apple.lsd.iconscache/Library/Caches/com.apple.IconsCache/) and thus enumerate installed applications. The document includes timeline, technical format details, a proof-of-concept that extracts icons and lists apps, and notes that Apple fixed the issue in iOS/iPadOS 14.0.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.