CVE-2012-0645

Siri in Apple iOS before 5.1 does not properly restrict the ability of Mail.app to handle voice commands, which allows physically proximate attackers to bypass the locked state via a command that forwards an active e-mail message to an arbitrary recipient.
References
Link Resource
http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html Mailing List Vendor Advisory
http://secunia.com/advisories/48288 Third Party Advisory
http://www.securitytracker.com/id?1026774 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2012-03-08 22:55

Updated : 2024-02-28 11:41


NVD link : CVE-2012-0645

Mitre link : CVE-2012-0645

CVE.ORG link : CVE-2012-0645


JSON object : View

Products Affected

apple

  • iphone_os
CWE
CWE-264

Permissions, Privileges, and Access Controls