Vulnerability Description
Siri in Apple iOS before 5.1 does not properly restrict the ability of Mail.app to handle voice commands, which allows physically proximate attackers to bypass the locked state via a command that forwards an active e-mail message to an arbitrary recipient.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Iphone Os | < 5.1 |
Related Weaknesses (CWE)
References
- http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.htmlMailing ListVendor Advisory
- http://secunia.com/advisories/48288Third Party Advisory
- http://www.securitytracker.com/id?1026774Third Party AdvisoryVDB Entry
- http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.htmlMailing ListVendor Advisory
- http://secunia.com/advisories/48288Third Party Advisory
- http://www.securitytracker.com/id?1026774Third Party AdvisoryVDB Entry
FAQ
What is CVE-2012-0645?
CVE-2012-0645 is a vulnerability with a CVSS score of 1.2 (LOW). Siri in Apple iOS before 5.1 does not properly restrict the ability of Mail.app to handle voice commands, which allows physically proximate attackers to bypass the locked state via a command that forw...
How severe is CVE-2012-0645?
CVE-2012-0645 has been rated LOW with a CVSS base score of 1.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2012-0645?
Check the references section above for vendor advisories and patch information. Affected products include: Apple Iphone Os.