CVE-2012-0645 in iOS
Summary
Siri in Apple iOS before 5.1 does not properly restrict the ability of Mail.app to handle voice commands, which allows physically proximate attackers to bypass the locked state via a command that forwards an active e-mail message to an arbitrary recipient.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
01/12/2012
Disclosure
03/08/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 4794 | Apple iOS Siri Command Parsing access control | 264 | Proof-of-Concept | Official fix | CVE-2012-0645 |