VulnerabilityModified
CVE-2012-0645
Siri in Apple iOS before 5.1 does not properly restrict the ability of Mail.app to handle voice commands, which allows physically proximate attackers to bypass the locked state via a command that forwards an active e-mail message to an arbitrary…
LOW 1.2EPSS 0.35%
Does this matter?
Lower severity and a low EPSS score (0.35%). Track it; it rarely justifies an emergency change on its own.
Description
Siri in Apple iOS before 5.1 does not properly restrict the ability of Mail.app to handle voice commands, which allows physically proximate attackers to bypass the locked state via a command that forwards an active e-mail message to an arbitrary recipient.
- CVSS 2.0
- 1.2 LOWAV:L/AC:H/Au:N/C:N/I:P/A:N
- EPSS
- 0.35% probability · 28th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- apple/iphone os
- Source
- product-security@apple.com
References
- http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.htmlMailing List, Vendor Advisory
- http://secunia.com/advisories/48288Third Party Advisory
- http://www.securitytracker.com/id?1026774Third Party Advisory, VDB Entry
- http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.htmlMailing List, Vendor Advisory
- http://secunia.com/advisories/48288Third Party Advisory
- http://www.securitytracker.com/id?1026774Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.