Vulnerability Description
Multiple race conditions in the Phone app in Apple iOS before 7.0.3 allow physically proximate attackers to bypass the locked state, and dial the telephone numbers in arbitrary Contacts entries, by visiting the Contacts pane.
CVSS Score
3.3
LOW
AV:L/AC:M/Au:N/C:P/I:P/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Iphone Os | <= 7.0.2 |
Related Weaknesses (CWE)
References
- http://lists.apple.com/archives/security-announce/2013/Oct/msg00002.htmlVendor Advisory
- http://lists.apple.com/archives/security-announce/2013/Oct/msg00002.htmlVendor Advisory
FAQ
What is CVE-2013-5164?
CVE-2013-5164 is a vulnerability with a CVSS score of 3.3 (LOW). Multiple race conditions in the Phone app in Apple iOS before 7.0.3 allow physically proximate attackers to bypass the locked state, and dial the telephone numbers in arbitrary Contacts entries, by vi...
How severe is CVE-2013-5164?
CVE-2013-5164 has been rated LOW with a CVSS base score of 3.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-5164?
Check the references section above for vendor advisories and patch information. Affected products include: Apple Iphone Os.