PT-2008-5521 · Apple · Ios+1

CVE-2008-4228 · Publicado 2008-11-25 · Atualizado 2022-08-09

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Apple iPhone OS versions 1.0 through 2.1 Apple iPhone OS for iPod touch versions 1.1 through 2.1

Description: The issue allows physically proximate attackers to make a phone call to an arbitrary number by leveraging the emergency-call ability of locked devices.

Recommendations: For Apple iPhone OS versions 1.0 through 2.1, consider disabling the emergency-call feature when the device is locked to prevent unauthorized access. For Apple iPhone OS for iPod touch versions 1.1 through 2.1, restrict the ability to make calls when the device is locked to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-4228

Produtos afetados

Ios

Iphone Os For Ipod Touch

Referências · 8

• http://securitytracker.com/id?1021271 · Nota
• http://vupen.com/english/advisories/2008/3232 · Nota
• http://support.apple.com/kb/HT3318 · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html · Aviso do Fabricante
• http://secunia.com/advisories/32756 · Nota
• http://osvdb.org/50025 · Nota
• http://securityfocus.com/bid/32394 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-4228 · Nota de Segurança