PT-2008-5211 · Apple · Iphone

Greenmymac + 1 · Published 2008-09-02 · Updated 2008-09-17 · CVE-2008-3876

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Low

Base vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple iPhone version 2.0.2

Description The issue allows physically proximate attackers to bypass intended access restrictions, obtain sensitive information, or make arbitrary use of the device. This can be achieved via an Emergency Call tap and a Home double-tap, followed by a tap of any contact's blue arrow.

Recommendations For Apple iPhone version 2.0.2, as a temporary workaround, consider restricting access to the Emergency Call feature and the Home button double-tap functionality until a patch is available. Additionally, limit the use of contact information to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2008-3876

Affected Products

Iphone

References · 4

• 🔥 http://forums.macrumors.com/showthread.php?t=551617 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-3876 · Security Note
• http://securitytracker.com/id?1020763 · Note
• http://forums.macrumors.com/showpost.php?p=6121914&postcount=118 · Note