Design/Logic Flaw

The Passcode Lock implementation in Apple iOS before 6 allows physically proximate attackers to bypass an intended passcode requirement via vectors involving use of the camera...

Design/Logic Flaw

The Passcode Lock implementation in Apple iOS before 6 allows physically proximate attackers to bypass an intended passcode requirement via vectors related to ending a FaceTime call...

Design/Logic Flaw

The Passcode Lock implementation in Apple iOS before 6 does not properly manage the lock state, which allows physically proximate attackers to bypass an intended passcode requirement via unspecified vectors...

Code injection

The Passcode Lock implementation in Apple iOS before 6 does not properly interact with the "Slide to Power Off" feature, which allows physically proximate attackers to see the most recently used third-party app by watching the device's screen...

Spoofing

The Passcode Lock implementation in Apple iOS before 6 does not properly restrict photo viewing, which allows physically proximate attackers to view arbitrary stored photos by spoofing a time value...

CVE-2012-3735

The Passcode Lock implementation in Apple iOS before 6 does not properly interact with the "Slide to Power Off" feature, which allows physically proximate attackers to see the most recently used third-party app by watching the device's screen...

CVE-2012-3731

CVE-2012-3731 affects Apple iOS prior to 6, where Mail’s Data Protection for email attachments is not correctly implemented, allowing a physically proximate attacker to bypass the passcode requirement via unspecified vectors. The Apple advisory indicates the fix is in iOS 6 (update via iTunes/Sof...

CVE-2012-3738

CVE-2012-3738 affects Apple iOS before 6, in the Passcode Lock Emergency Dialer. A logic issue allowed a physically proximate user to bypass access restrictions and initiate FaceTime calls via Voice Dialing, potentially exposing contact information. The issue is tied to the Emergency Dialer scree...

CVE-2012-3738

The Emergency Dialer screen in the Passcode Lock implementation in Apple iOS before 6 does not properly limit the dialing methods, which allows physically proximate attackers to bypass intended access restrictions and make FaceTime calls through Voice Dialing, or obtain sensitive contact...

CVE-2012-3740

The Passcode Lock implementation in Apple iOS before 6 does not properly manage the lock state, which allows physically proximate attackers to bypass an intended passcode requirement via unspecified vectors...

CVE-2012-3735

CVE-2012-3735 affects Apple iOS prior to 6, where the Passcode Lock display logic on the lock screen can reveal the most recently used third‑party app when the user interacts with the Slide to Power Off control. Root cause: a logic issue in lock state management. Impact: a physically proximate at...

CVE-2012-3736

The Passcode Lock implementation in Apple iOS before 6 allows physically proximate attackers to bypass an intended passcode requirement via vectors related to ending a FaceTime call...

CVE-2012-3737

The Passcode Lock implementation in Apple iOS before 6 does not properly restrict photo viewing, which allows physically proximate attackers to view arbitrary stored photos by spoofing a time value...

CVE-2012-3739

The Passcode Lock implementation in Apple iOS before 6 allows physically proximate attackers to bypass an intended passcode requirement via vectors involving use of the camera...

CVE-2012-3739

CVE-2012-3739 affects Apple iOS prior to 6. The vulnerability lies in the Passcode Lock implementation where, via camera-related interaction, a physically proximate attacker can bypass the intended passcode requirement on the lock screen. Impact as described: bypass of lock. Remediation: update t...

CVE-2012-3737

The CVE-2012-3737 entry concerns iOS Passcode Lock on devices running before iOS 6. A logic issue allowed a physically proximate attacker with device access to view photos by spoofing the device time, bypassing photo access restrictions tied to lock state. The root cause is improper handling of t...

CVE-2012-3740

CVE-2012-3740 affects Apple iOS before 6, described as a logic/lock-state flaw in Passcode Lock that allows physically proximate attackers to bypass the intended passcode requirement via unspecified vectors. The vulnerability is tied to lock-state management, with impact stated as bypassing the p...

CVE-2012-3736

CVE-2012-3736 affects Apple iOS prior to 6, where a logic issue in the Passcode Lock allows a physically proximate attacker to bypass the passcode by exploiting the FaceTime call-ending flow. Affected platforms include iPhone 3GS and later, iPod touch 4th gen and later, and iPad 2 and later. The ...

CVE-2012-3738: Undefined Security Weakness

The Emergency Dialer screen in the Passcode Lock implementation in Apple iOS before 6 does not properly limit the dialing methods, which allows physically proximate attackers to bypass intended access restrictions and make FaceTime calls through Voice Dialing, or obtain sensitive contact...

CVE-2012-3740: Undefined Security Weakness

The Passcode Lock implementation in Apple iOS before 6 does not properly manage the lock state, which allows physically proximate attackers to bypass an intended passcode requirement via unspecified vectors...