PT-2013-5401

CVE-2013-5156

Publicado

2013-09-19

Atualizado

2013-10-22

Descrição por

CVSS 2.0

4.3

Média

MétricasAV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7

Description The issue concerns the Telephony subsystem, which does not enforce API conformity for access to telephony-daemon interfaces. This allows attackers to bypass intended restrictions on phone calls by using a crafted app that sends direct requests to the daemon.

Recommendations For versions prior to 7, update to version 7 or later to resolve the issue.

Explorabilidade

Correção

Pesquisadores