Vulnerability in Apple Iphone Os

CVE-2012-0644

Race condition in the Passcode Lock feature in Apple iOS before 5.1 allows physically proximate attackers to bypass intended passcode requirements via a slide-to-dial gesture.

Vulnerability class: Race Condition

EPSS: 0.003 (20.2th percentile) — read the EPSS interpretation.

Affected products

Apple Iphone_os
N/a — versions n/a

Weakness classification (CWE)

CWE-362 — Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition)

References

product-security@apple.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
product-security@apple.com (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
product-security@apple.com (vendor-advisory, x_refsource_APPLE, Mailing List, Vendor Advisory)