Lucene search
HistoryOct 14, 2011 - 10:55 a.m.
CVE-2011-3432
apple
ios
cve-2011-3432
denial of service
remote attackers
tel: url
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
5.9 Medium
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.2%
The UIKit Alerts component in Apple iOS before 5 allows remote attackers to cause a denial of service (device hang) via a long tel: URL that triggers a large size for the acceptance dialog.
Affected configurations
Node
appleiphone_osMatch3.0-iphone
ORappleiphone_osMatch3.1
ORappleiphone_osMatch3.1-iphone
ORappleiphone_osMatch3.1-ipodtouch
ORappleiphone_osMatch3.1.2-iphone
ORappleiphone_osMatch3.1.3-iphone
ORappleiphone_osMatch3.2-iphone
ORappleiphone_osMatch3.2-ipodtouch
ORappleiphone_osMatch3.2.1
ORappleiphone_osMatch3.2.1-ipad
ORappleiphone_osMatch3.2.2
ORappleiphone_osMatch4.0
ORappleiphone_osMatch4.0-iphone
ORappleiphone_osMatch4.0-ipodtouch
ORappleiphone_osMatch4.0.1
ORappleiphone_osMatch4.0.1-iphone
ORappleiphone_osMatch4.0.1-ipodtouch
ORappleiphone_osMatch4.0.2
ORappleiphone_osMatch4.1
ORappleiphone_osMatch4.2.1
ORappleiphone_osMatch4.2.5
ORappleiphone_osMatch4.2.8
ORappleiphone_osMatch4.3.0
ORappleiphone_osMatch4.3.1
ORappleiphone_osMatch4.3.2
ORappleiphone_osMatch4.3.3
ORappleiphone_osMatch4.3.5
ORappleiphone_osMatch4.3.5-ipad
ORappleiphone_osMatch4.3.5-ipodtouch
Related
prion
prion
Design/Logic Flaw
2011-10-14 10:55:00
cvelist
cvelist
CVE-2011-3432
2011-10-14 10:00:00
nvd
nvd
CVE-2011-3432
2011-10-14 10:55:10
nessus
nessus
Apple iOS < 5.0 Multiple Vulnerabilities (BEAST)
2012-06-19 00:00:00
securityvulns
securityvulns
APPLE-SA-2011-10-12-1 iOS 5 Software Update
2011-10-15 00:00:00
Apple iPhone multiple security vulnerabilities
2011-10-16 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
5.9 Medium
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.2%
Related for CVE-2011-3432