Apple iPhone/iPod touch User Interface Accessibility Security Vulnerability
BID:43075
Info
Apple iPhone/iPod touch User Interface Accessibility Security Vulnerability
| Bugtraq ID: | 43075 |
| Class: | Unknown |
| CVE: |
CVE-2010-1809 |
| Remote: | No |
| Local: | Yes |
| Published: | Sep 08 2010 12:00AM |
| Updated: | Sep 08 2010 12:00AM |
| Credit: | Robin Kipp of Forever Living Products Europe |
| Vulnerable: |
Apple iPod Touch 3.1.3 Apple iPod Touch 3.1.2 Apple iPod Touch 3.1.1 Apple iPod Touch 3.0 Apple iPhone 4.0.1 Apple iPhone 3.2.1 Apple iPhone 3.1.3 Apple iPhone 3.1.2 Apple iPhone 3.0.1 Apple iPhone 4.0.1 - Iphone Apple iPhone 4.0 - Ipodtouch Apple iPhone 4.0 - Iphone Apple iPhone 4.0 Apple iPhone 3.2.1 - Ipad Apple iPhone 3.2 - Ipodtouch Apple iPhone 3.2 - Iphone Apple iPhone 3.2 Apple iPhone 3.1.3 - Ipodtouch Apple iPhone 3.1.3 - Iphone Apple iPhone 3.1.2 - Ipodtouch Apple iPhone 3.1.2 - Iphone Apple iPhone 3.1 - Ipodtouch Apple iPhone 3.1 - Iphone Apple iPhone 3.1 Apple iPhone 3.0.1 - Ipodtouch Apple iPhone 3.0.1 - Iphone Apple iPhone 3.0 - Ipodtouch Apple iPhone 3.0 - Iphone Apple iPhone 3.0 Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 3.2.2 Apple iOS 3.2.1 Apple iOS 4 Apple iOS 3.2 |
| Not Vulnerable: |
Apple iOS 4.1 |
Discussion
Apple iPhone/iPod touch User Interface Accessibility Security Vulnerability
Apple iOS for iPhone is prone to a security vulnerability because VoiceOver does not announce the presence of an icon.
Successful exploits may result in a false sense of security.
NOTE: This issue was previously discussed in BID 43070 (Apple iPhone/iPod touch Prior to iOS 4.1 Multiple Vulnerabilities) but has been given its own record to better document it.
Apple iOS for iPhone is prone to a security vulnerability because VoiceOver does not announce the presence of an icon.
Successful exploits may result in a false sense of security.
NOTE: This issue was previously discussed in BID 43070 (Apple iPhone/iPod touch Prior to iOS 4.1 Multiple Vulnerabilities) but has been given its own record to better document it.
Exploit / POC
Apple iPhone/iPod touch User Interface Accessibility Security Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Apple iPhone/iPod touch User Interface Accessibility Security Vulnerability
Solution:
The vendor has released an advisory and fixes. Please see the references for details.
Solution:
The vendor has released an advisory and fixes. Please see the references for details.
References
Apple iPhone/iPod touch User Interface Accessibility Security Vulnerability
References:
References:
- iOS Homepage (Apple)
- iPhone Product Page (Apple)
- iPod touch Product Page (Apple)