CVE-2008-4593: Infoleak

Published Oct 17, 2008

Updated

Apple iPhone 2.1 with firmware 5F136, when Require Passcode is enabled and Show SMS Preview is disabled, allows physically proximate attackers to obtain sensitive information by performing an Emergency Call tap and then reading SMS messages on the device screen, aka Apple bug number 6267416.

Affected Software

1 affected component

Apple iPhone=2.1

Event History

Oct 17, 2008

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-4593?

CVE-2008-4593 is classified as a vulnerability that allows sensitive information leakage on affected devices.

How do I fix CVE-2008-4593?

To mitigate CVE-2008-4593, ensure that both the Require Passcode and Show SMS Preview settings are appropriately configured.

Who is affected by CVE-2008-4593?

CVE-2008-4593 affects users of the Apple iPhone running firmware 2.1.

What type of attack does CVE-2008-4593 allow?

CVE-2008-4593 allows physically proximate attackers to view SMS messages on the device without the user's consent.

What is the mechanism behind CVE-2008-4593?

CVE-2008-4593 exploits the Emergency Call feature, bypassing security settings to access SMS content.