CVE-2009-2207: Low severity iphone os vulnerability

Published Sep 10, 2009

Updated

The MobileMail component in Apple iPhone OS 3.0 and 3.0.1, and iPhone OS 3.0 for iPod touch, lists deleted e-mail messages in Spotlight search results, which might allow local users to obtain sensitive information by reading these messages.

Affected Software

3 affected components

apple iPhone OS=3.0

apple iPhone OS=3.0.1

apple iPhone OS=3.0

Event History

Sep 10, 2009

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-2207?

CVE-2009-2207 is classified as a medium severity vulnerability due to its potential to expose deleted email messages to local users.

How do I fix CVE-2009-2207?

To fix CVE-2009-2207, users should update their Apple iPhone OS to a later version that addresses this vulnerability.

Which versions of the Apple iPhone OS are affected by CVE-2009-2207?

CVE-2009-2207 affects Apple iPhone OS versions 3.0, 3.0.1, and 3.0 for iPod touch.

What is the impact of CVE-2009-2207?

The impact of CVE-2009-2207 allows local users to potentially access sensitive information from deleted email messages.

Can CVE-2009-2207 be exploited remotely?

CVE-2009-2207 cannot be exploited remotely as it requires local access to the device.