Airmail 3 for Mac Advisory:EventHandler Race Condition: CVE-2018-15670

Home | Research | Resources | Advisories | Airmail 3 for Mac

Airmail 3 for Mac

EventHandler Race Condition

CVE ID

CVE-2018-15670

VENDOR

Bloop S.R.L.

PRODUCT

Airmail 3 for Mac

Product version

3.5.9

Vulnerability Details

Airmail's primary WebView instance implements "webView:decidePolicyForNavigationAction:request:frame:decisionListener:" such that "OpenURL" is the default URL handler. A navigation request is processed by the default URL handler only if the "currentEvent" is "NX_LMOUSEUP" or "NX_OMOUSEUP". An attacker may abuse HTML Elements with an EventHandler for a chance to validate navigation requests for URLs that are processed during the "NX_LMOUSEUP" event triggered by clicking an email.

Learn More →

Vendor response

No response.

Disclosure timeline

08-06-2018 - Vendor disclosure via email
08-13-2018 - Vendor notified via Support Page
08-21-2018 - Vendor notified of the advisory release

What is Responsible Disclosure?

Blog Post

Reverse Engineering

What is responsible disclosure? In this article, VerSprite will outline a typical process for zero-day vulnerability reporting, the ethics behind hacking, and provide real-world examples of our responsible disclosures.

Cloud Security Discussions and Advice on How to Move Your Business to the Cloud

Podcast

Enterprise Data Security

Is your organization thinking of moving your assets and applications to the Cloud? Are you struggling to manage resources and risks in AWS, Microsoft Azure, or Google Cloud Platform (GCP)? In this podcast, VerSprite’s Cloud security professionals provides actionable advice to businesses moving to AWS, Azure, or GCP and managing Cloud security risks. Full Transcript Available.

Integrating Security into DevOps

Ebook

DevOps

This guide builds on the introduction of “Security as Code”. As expected, this is the automation of security checks and gates via code and integrated into the overall DevOps process again following software engineering practices.

We are an international squad of professionals working as one.

[email protected]