CVE-2016-8507 | BDVDB-2026-82146 Detail

Yandex N.V.Yandex Browser for iOS

Description#

Yandex Browser for iOS before 16.10.0.2357 does not properly restrict processing of facetime:// URLs, which allows remote attackers to initiate facetime-call without user's approval and obtain video and audio data from a device via a crafted web site.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://yandex.com/blog/security-changelogs/fixed-in-version-16-10
http://www.securityfocus.com/bid/96517

Exploit#

No public exploit known

History#

Version 12017-03-01Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.