1.2
CVE-2012-0645
- EPSS 0.35%
- Veröffentlicht 08.03.2012 22:55:04
- Zuletzt bearbeitet 16.06.2026 23:38:00
- Quelle product-security@apple.com
- CVE-Watchlists
- Unerledigt
Siri in Apple iOS before 5.1 does not properly restrict the ability of Mail.app to handle voice commands, which allows physically proximate attackers to bypass the locked state via a command that forwards an active e-mail message to an arbitrary recipient.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.35% | 0.262 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 1.2 | 1.9 | 2.9 |
AV:L/AC:H/Au:N/C:N/I:P/A:N
|
http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html
http://secunia.com/advisories/48288
http://www.securitytracker.com/id?1026774