3rd party software can be installed from outside the App Store

Originator:hello
Number:rdar://18490768 Date Originated:9/26/14
Status:Open Resolved:
Product:iOS Product Version:7.1.2, 8.0, 8.0.2
Classification:Security Reproducible:Always
 
Summary:
By changing the date and time on a device you can download and run an iOS from gba4iosapp.com

Steps to Reproduce:
1. Visit gba4iosapp.com
2. Read instructions
3. Set date to 1 day behind
4. Visit gba4iosapp.com again
5. Tap download
6. Tap yes on UIAlertView
7. Open App
8. Select Yes when prompted to run app from untrusted source
9. Play Gameboy games

Expected Results:
Software should only be installable from the App Store.

Actual Results:
Software can be downloaded and run from the web.

Version:
iOS 7.1.2, iOS 8, iOS 8.0.2

Notes:


Configuration:
iPad 2, iPhone 5s, iPhone 6, iPad Air, iPad (3rd Generation)

Attachments:

Comments


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!