4.3
CVSSv2

CVE-2013-5156

Published: 19/09/2013 Updated: 22/10/2013
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

Vulnerability Summary

The Telephony subsystem in Apple iOS prior to 7 does not require API conformity for access to telephony-daemon interfaces, which allows malicious users to bypass intended restrictions on phone calls via a crafted app that sends direct requests to the daemon.

Vulnerable Product Search on Vulmon Subscribe to Product

apple iphone os 1.0.0

apple iphone os 1.0.1

apple iphone os 1.0.2

apple iphone os 1.1.0

apple iphone os 3.0

apple iphone os 3.0.1

apple iphone os 3.1

apple iphone os 3.1.2

apple iphone os 4.3.1

apple iphone os 4.3.2

apple iphone os 4.3.3

apple iphone os 4.3.5

apple iphone os 5.0

apple iphone os 1.1.5

apple iphone os 2.0

apple iphone os 2.0.0

apple iphone os 2.0.1

apple iphone os 2.0.2

apple iphone os 4.0

apple iphone os 4.0.1

apple iphone os 4.0.2

apple iphone os 4.1

apple iphone os 6.0.1

apple iphone os 6.0.2

apple iphone os 6.1

apple iphone os 6.1.2

apple iphone os 1.1.2

apple iphone os 1.1.4

apple iphone os 2.1.1

apple iphone os 2.2.1

apple iphone os 3.1.3

apple iphone os 3.2.1

apple iphone os 4.2.5

apple iphone os 4.3.0

apple iphone os 5.1

apple iphone os 6.0

apple iphone os 6.1.3

apple iphone os

apple iphone os 1.1.1

apple iphone os 1.1.3

apple iphone os 2.1

apple iphone os 2.2

apple iphone os 3.2

apple iphone os 3.2.2

apple iphone os 4.2.1

apple iphone os 4.2.8

apple iphone os 5.0.1

apple iphone os 5.1.1