PT-2015-2448 · Apple · Ios

Andreas Kurtz · Published 2015-10-23 · Updated 2016-12-24 · CVE-2015-7022

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.1

Description The issue is related to the Telephony subsystem in Apple iOS, which lacks protection for certain internal data. This can be exploited by a remote attacker using a specially crafted app to gain access to information about completed calls.

Recommendations For versions prior to 9.1, update to version 9.1 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2015-11813

CVE-2015-7022

Affected Products

Ios

References · 6

• https://support.apple.com/HT205370 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-7022 · Security Note
• http://lists.apple.com/archives/security-announce/2015/Oct/msg00002.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-11813 · Security Note
• http://securityfocus.com/bid/77268 · Note
• http://securitytracker.com/id/1033929 · Note