Spoofing

The Passcode Lock implementation in Apple iOS before 6 does not properly restrict photo viewing, which allows physically proximate attackers to view arbitrary stored photos by spoofing a time value...

Design/Logic Flaw

The Passcode Lock implementation in Apple iOS before 6 does not properly manage the lock state, which allows physically proximate attackers to bypass an intended passcode requirement via unspecified vectors...

CVE-2012-3738

The Emergency Dialer screen in the Passcode Lock implementation in Apple iOS before 6 does not properly limit the dialing methods, which allows physically proximate attackers to bypass intended access restrictions and make FaceTime calls through Voice Dialing, or obtain sensitive contact...

CVE-2012-3738

CVE-2012-3738 affects Apple iOS before 6, in the Passcode Lock Emergency Dialer. A logic issue allowed a physically proximate user to bypass access restrictions and initiate FaceTime calls via Voice Dialing, potentially exposing contact information. The issue is tied to the Emergency Dialer scree...

CVE-2012-3735

The Passcode Lock implementation in Apple iOS before 6 does not properly interact with the "Slide to Power Off" feature, which allows physically proximate attackers to see the most recently used third-party app by watching the device's screen...

CVE-2012-3740

The Passcode Lock implementation in Apple iOS before 6 does not properly manage the lock state, which allows physically proximate attackers to bypass an intended passcode requirement via unspecified vectors...

CVE-2012-3735

CVE-2012-3735 affects Apple iOS prior to 6, where the Passcode Lock display logic on the lock screen can reveal the most recently used third‑party app when the user interacts with the Slide to Power Off control. Root cause: a logic issue in lock state management. Impact: a physically proximate at...

CVE-2012-3736

The Passcode Lock implementation in Apple iOS before 6 allows physically proximate attackers to bypass an intended passcode requirement via vectors related to ending a FaceTime call...

CVE-2012-3737

The Passcode Lock implementation in Apple iOS before 6 does not properly restrict photo viewing, which allows physically proximate attackers to view arbitrary stored photos by spoofing a time value...

CVE-2012-3739

The Passcode Lock implementation in Apple iOS before 6 allows physically proximate attackers to bypass an intended passcode requirement via vectors involving use of the camera...

CVE-2012-3736

CVE-2012-3736 affects Apple iOS prior to 6, where a logic issue in the Passcode Lock allows a physically proximate attacker to bypass the passcode by exploiting the FaceTime call-ending flow. Affected platforms include iPhone 3GS and later, iPod touch 4th gen and later, and iPad 2 and later. The ...

CVE-2012-3737

The CVE-2012-3737 entry concerns iOS Passcode Lock on devices running before iOS 6. A logic issue allowed a physically proximate attacker with device access to view photos by spoofing the device time, bypassing photo access restrictions tied to lock state. The root cause is improper handling of t...

CVE-2012-3740

CVE-2012-3740 affects Apple iOS before 6, described as a logic/lock-state flaw in Passcode Lock that allows physically proximate attackers to bypass the intended passcode requirement via unspecified vectors. The vulnerability is tied to lock-state management, with impact stated as bypassing the p...

CVE-2012-3738: Undefined Security Weakness

The Emergency Dialer screen in the Passcode Lock implementation in Apple iOS before 6 does not properly limit the dialing methods, which allows physically proximate attackers to bypass intended access restrictions and make FaceTime calls through Voice Dialing, or obtain sensitive contact...

CVE-2012-3740: Undefined Security Weakness

The Passcode Lock implementation in Apple iOS before 6 does not properly manage the lock state, which allows physically proximate attackers to bypass an intended passcode requirement via unspecified vectors...

CVE-2012-3737: Undefined Security Weakness

The Passcode Lock implementation in Apple iOS before 6 does not properly restrict photo viewing, which allows physically proximate attackers to view arbitrary stored photos by spoofing a time value...

CVE-2012-3735: Exposure of Sensitive Information to an Unauthorized Actor

The Passcode Lock implementation in Apple iOS before 6 does not properly interact with the "Slide to Power Off" feature, which allows physically proximate attackers to see the most recently used third-party app by watching the device's screen...

CVE-2012-3739: Undefined Security Weakness

The Passcode Lock implementation in Apple iOS before 6 allows physically proximate attackers to bypass an intended passcode requirement via vectors involving use of the camera...

CVE-2012-3736: Undefined Security Weakness

The Passcode Lock implementation in Apple iOS before 6 allows physically proximate attackers to bypass an intended passcode requirement via vectors related to ending a FaceTime call...

APPLE-SA-2012-03-07-2 iOS 5.1 Software Update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2012-03-07-2 iOS 5.1 Software Update iOS 5.1 Software Update is now available and addresses the following: CFNetwork Available for: iPhone 3GS, iPhone 4, iPhone 4S, iPod touch 3rd generation and later, iPad, iPad 2 Impact: Visiting a...