iOS 9.3.5 (Mansoor)

Posted on by Rbcafe

iOS 9.3.5 provides an important security update for your iPhone or iPad and is recommended for all users.

ios_935

For information on the security content of Apple software updates, please visit this website : https://support.apple.com/kb/HT201222

Searching information :
=============================================
Apple releases iOS 9.3.5 to fix 3 zero-day vulnerabilities. | "Trident" vulnerabilities were used to target a human rights activist. | The Million Dollar Dissident: NSO Group’s iPhone Zero-Days used against a UAE Human Rights Defender | The Trident Exploit Chain. | Ahmed Mansoor received suspicious text messages
=============================================

WebKit

  • Available for : iPhone 4s and later, iPad 2 and later, iPod touch (5th generation) and later.
  • Impact : Visiting a maliciously crafted website may lead to arbitrary code execution.
  • Description : A memory corruption issue was addressed through improved memory handling.
  • CVE-2016-4657 : Citizen Lab and Lookout.

Kernel

  • Available for : iPhone 4s and later, iPad 2 and later, iPod touch (5th generation) and later
  • Impact : An application may be able to disclose kernel memory
  • Description : A validation issue was addressed through improved input sanitization.
  • CVE-2016-4655 : Citizen Lab and Lookout.

Kernel

  • Available for : iPhone 4s and later, iPad 2 and later, iPod touch (5th generation) and later
  • Impact : An application may be able to execute arbitrary code with kernel privileges.
  • Description : A memory corruption issue was addressed through improved memory handling.
  • CVE-2016-4656 : Citizen Lab and Lookout.

More details : https://citizenlab.org/2016/08/million-dollar-dissident-iphone-zero-day-nso-group-uae/