CVE-2012-0645

Published: Mar 8, 2012Modified: Apr 29, 2026

1.2

Vector

AV:L/AC:H/Au:N/C:N/I:P/A:N

Exploitability: 1.9 / Impact: 2.9

Source: NVD

Description

Siri in Apple iOS before 5.1 does not properly restrict the ability of Mail.app to handle voice commands, which allows physically proximate attackers to bypass the locked state via a command that forwards an active e-mail message to an arbitrary recipient.

Affected (1)

Products: Apple: Iphone Os

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apple Iphone Os	Before 5.1

Related CWEs

References (6)

http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html

Source: product-security@apple.com

Mailing ListVendor Advisory

http://secunia.com/advisories/48288

Source: product-security@apple.com

Third Party Advisory

http://www.securitytracker.com/id?1026774

Source: product-security@apple.com

Third Party AdvisoryVDB Entry

http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListVendor Advisory

http://secunia.com/advisories/48288

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.securitytracker.com/id?1026774

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.