Title: Apple iPhone Passcode Lock Security Bypass Vulnerability
Severity: MODERATE
Description:
Apple iPhone is prone to a security-bypass vulnerability that can be leveraged to launch arbitrary iPhone applications.
This issue affects the 'Passcode Lock' feature because of the way that it handles emergency calls. Attackers can gain access to the favorites menu on the device by tapping the 'Emergency Call' button on the password-entry screen and then double-clicking the 'Home' button.
Attackers with physical access to the device can exploit this issue to gain unauthorized access to applications on the favorites menu. This may aid in various attacks, including information disclosure.
Versions prior to iPhone 1.1.3 and 2.1 are vulnerable.
Affected Products:
- Apple iPhone 1
- Apple iPhone 1.0.1
- Apple iPhone 1.0.2
- Apple iPhone 1.1.1
- Apple iPhone 1.1.2
- Apple iPhone 2.0
- Apple iPhone 2.0.1
- Apple iPhone 2.0.2
References:
- Apple: About the security content of QuickTime 7.4
- Apple: Apple Homepage
- Apple: iTunes Homepage
- Macrumors: Major Security Flaw in 2.0.2 [iPhone]
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
