Apple iPhone/iPad/iPod touch Prior to iOS 7 Safari History Information Disclosure Vulnerability

Bugtraq ID:	62573
Class:	Unknown
CVE:	CVE-2013-5150
Remote:	No
Local:	Yes
Published:	Sep 18 2013 12:00AM
Updated:	Oct 17 2014 09:00AM
Credit:	Apple
Vulnerable:	Apple iPod Touch 0 Apple iPhone 0 Apple iPad 0 Apple iOS 4.2.1 Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 3.2.2 Apple iOS 3.2.1 Apple iOS 5.1.1 Apple iOS 5.1 Apple iOS 5.0.1 Apple iOS 5 Apple iOS 4.3.5 Apple iOS 4.3.4 Apple iOS 4.3.3 Apple iOS 4.3.2 Apple iOS 4.3.1 Apple iOS 4.3 Apple iOS 4.2.9 Apple iOS 4.2.8 Apple iOS 4.2.7 Apple iOS 4.2.6 Apple iOS 4.2.5 Apple iOS 4.2.10 Apple iOS 4.2 Apple iOS 4.1 Apple iOS 4 Apple iOS 3.2 Apple iOS 3.1 Apple iOS 3.0 Apple iOS 2.1 Apple iOS 2.0
Not Vulnerable:

Apple iPhone/iPad/iPod touch Prior to iOS 7 Safari History Information Disclosure Vulnerability

Apple iOS for the iPhone, the iPod touch, and the iPad is prone to an information-disclosure vulnerability that affects its Safari browser.

Successfully exploiting this issue may allow attackers with physical access to an affected device to obtain history data of an open tab from the Safari browser. Information harvested may aid in launching further attacks.

Note: This issue was previously covered in BID 62491 (Apple iPhone/iPad/iPod touch Prior to iOS 7 Multiple Vulnerabilities), but has been given its own record to better document it.

Apple iPhone/iPad/iPod touch Prior to iOS 7 Safari History Information Disclosure Vulnerability

To exploit this issue an attacker needs physical access to the device.

Apple iPhone/iPad/iPod touch Prior to iOS 7 Safari History Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Apple iPhone/iPad/iPod touch Prior to iOS 7 Safari History Information Disclosure Vulnerability

References:

• Apple iOS Homepage (Apple)
  
• iPad Homepage (Apple)
  
• iPhone Product Page (Apple)
  
• iPod touch Product Page (Apple)