Vulnerability in Apple Iphone OS
CVE-2013-5164
Multiple race conditions in the Phone app in Apple iOS before 7.0.3 allow physically proximate attackers to bypass the locked state, and dial the telephone numbers in arbitrary Contacts entries, by visiting the Contacts pane.
Vulnerability class: Race Condition
EPSS: 0.002 (13.7th percentile) — read the EPSS interpretation.
Affected products
- Apple Iphone_os — versions 7.0, 7.0.1
- N/a — versions n/a
Weakness classification (CWE)
References
- product-security@apple.com (vendor-advisory, x_refsource_APPLE, Vendor Advisory)