Lucene search

K
cve[email protected]CVE-2013-6835
HistoryMar 14, 2014 - 10:55 a.m.

CVE-2013-6835

2014-03-1410:55:00
CWE-264
web.nvd.nist.gov
35
telephonyui
apple
ios
security
vulnerability
privacy
facetime
remote attack

5.5 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.092 Low

EPSS

Percentile

94.6%

TelephonyUI Framework in Apple iOS 7 before 7.1, when Safari is used, does not require user confirmation for FaceTime audio calls, which allows remote attackers to obtain telephone number or e-mail address information via a facetime-audio: URL.

5.5 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.092 Low

EPSS

Percentile

94.6%