PT-2012-4986 · Apple · Uikit+2

Ben Smith · Publicado 2012-09-20 · Atualizado 2017-08-29 · CVE-2012-3746

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions iOS versions prior to 6

Description The issue concerns the UIWebView component in UIKit, which fails to properly utilize the Data Protection feature. This allows attackers to access cleartext file content by directly accessing the device's filesystem.

Recommendations For versions prior to 6, update to iOS version 6 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2012-3746

Produtos afetados

Uikit

Uiwebview

Ios

Referências · 5

• http://support.apple.com/kb/HT5503 · Aviso do Fabricante
• http://osvdb.org/85633 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/78706 · Nota
• http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-3746 · Nota de Segurança