PT-2008-5810 · Apple · Iphone

Published 2008-10-17 · Updated 2017-08-08 · CVE-2008-4593

Positive Technologies (AI Summary)

CVSS v2.0

1.2

Low

Base vector

AV:L/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple iPhone version 2.1 with firmware 5F136

Description The issue allows physically proximate attackers to obtain sensitive information by performing an Emergency Call tap and then reading SMS messages on the device screen when Require Passcode is enabled and Show SMS Preview is disabled.

Recommendations For Apple iPhone version 2.1 with firmware 5F136, consider enabling Show SMS Preview or disabling the Emergency Call feature as a temporary workaround to minimize the risk of exploitation.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2008-4593

Affected Products

Iphone

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2008-4593 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46062 · Note
• http://securitytracker.com/id?1021021 · Note
• http://karlkraft.com/index.php/2008/10/03/yet-another-iphone-emergency-call-security-bug · Note