PT-2008-5211 · Apple · Iphone

Greenmymac + 1 · Publicado 2008-09-02 · Atualizado 2008-09-17 · CVE-2008-3876

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Baixa

Vetor base

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple iPhone version 2.0.2

Description The issue allows physically proximate attackers to bypass intended access restrictions, obtain sensitive information, or make arbitrary use of the device. This can be achieved via an Emergency Call tap and a Home double-tap, followed by a tap of any contact's blue arrow.

Recommendations For Apple iPhone version 2.0.2, as a temporary workaround, consider restricting access to the Emergency Call feature and the Home button double-tap functionality until a patch is available. Additionally, limit the use of contact information to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-3876

Produtos afetados

Iphone

Referências · 4

• 🔥 http://forums.macrumors.com/showthread.php?t=551617 · Exploit
• http://securitytracker.com/id?1020763 · Nota
• http://forums.macrumors.com/showpost.php?p=6121914&postcount=118 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-3876 · Nota de Segurança