PT-2013-5409 · Apple · Ios
Published
2013-10-24
·
Updated
2013-10-24
·
CVE-2013-5164
CVSS v2.0
3.3
Low
| Vector | AV:L/AC:M/Au:N/C:P/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Apple iOS versions prior to 7.0.3
Description
The issue allows physically proximate attackers to bypass the locked state of the device and dial telephone numbers from arbitrary Contacts entries by visiting the Contacts pane in the Phone app. This is due to multiple race conditions present in the Phone app.
Recommendations
For versions prior to 7.0.3, update to version 7.0.3 or later to resolve the issue.
Fix
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ios