Design/Logic Flaw

The Passcode Lock feature in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 displays SMS messages when the emergency-call screen is visible, which allows physically proximate attackers to obtain sensitive information by reading these messages. NOTE: this might be a...

CVE-2008-4593

Summary: CVE-2008-4593 (Apple iPhone OS 1.0–2.1 / iPod touch 1.1–2.1) allows physically proximate attackers to view sensitive SMS content by exploiting the Emergency Call screen when Passcode is required and SMS Preview is off. The linked documents (CVE-2008-4230, PRION/N) describe the same issue...