PT-2015-2448 · Apple · Ios

Andreas Kurtz · Publicado 2015-10-23 · Atualizado 2016-12-24 · CVE-2015-7022

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.1

Description The issue is related to the Telephony subsystem in Apple iOS, which lacks protection for certain internal data. This can be exploited by a remote attacker using a specially crafted app to gain access to information about completed calls.

Recommendations For versions prior to 9.1, update to version 9.1 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2015-11813

CVE-2015-7022

Produtos afetados

Ios

Referências · 6

• https://support.apple.com/HT205370 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-7022 · Nota de Segurança
• http://securityfocus.com/bid/77268 · Nota
• http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html · Aviso do Fabricante
• http://securitytracker.com/id/1033929 · Nota
• https://bdu.fstec.ru/vul/2015-11813 · Nota de Segurança