PT-2013-5401

CVE-2013-5156

Published

2013-09-19

Updated

2013-10-22

Description by

CVSS 2.0

4.3

Medium

MetricsAV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7

Description The issue concerns the Telephony subsystem, which does not enforce API conformity for access to telephony-daemon interfaces. This allows attackers to bypass intended restrictions on phone calls by using a crafted app that sends direct requests to the daemon.

Recommendations For versions prior to 7, update to version 7 or later to resolve the issue.

Exploitability

Fix

Researchers