PT-2012-4975 · Apple · Ios

Chris Lawrence + 1 · Publicado 2012-09-20 · Atualizado 2017-08-29 · CVE-2012-3735

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 6

Description The issue concerns the Passcode Lock implementation, which does not properly interact with the "Slide to Power Off" feature. This allows physically proximate attackers to see the most recently used third-party app by watching the device's screen.

Recommendations For Apple iOS versions prior to 6, update to a version 6 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2012-3735

Produtos afetados

Ios

Referências · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/78683 · Nota
• http://support.apple.com/kb/HT5503 · Aviso do Fabricante
• http://osvdb.org/85640 · Nota
• http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-3735 · Nota de Segurança