VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 26, 2012· Updated Jun 16, 2026

CVE-2012-3698

CVE-2012-3698

Description

Apple Xcode before 4.4 does not properly compose a designated requirement (DR) during signing of programs that lack bundle identifiers, which allows remote attackers to read keychain entries via a crafted app, as demonstrated by the keychain entries of a (1) helper tool or (2) command-line tool.

Affected products

28
  • Apple Inc./Xcode28 versions
    cpe:2.3:a:apple:xcode:*:*:*:*:*:*:*:*+ 27 more
    • cpe:2.3:a:apple:xcode:*:*:*:*:*:*:*:*range: <=4.3.3
    • cpe:2.3:a:apple:xcode:1.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:xcode:2.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:xcode:2.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:xcode:2.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:xcode:2.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:xcode:2.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:xcode:2.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:xcode:3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:xcode:3.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:xcode:3.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:xcode:3.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:xcode:3.1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:xcode:3.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:xcode:3.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:xcode:3.2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:xcode:3.2.4:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:xcode:3.2.5:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:xcode:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:xcode:4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:xcode:4.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:xcode:4.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:xcode:4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:xcode:4.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:xcode:4.3:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:xcode:4.3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:xcode:4.3.2:*:*:*:*:*:*:*
    • (no CPE)range: <4.4

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.