What is the severity of CVE-2011-3245?

CVE-2011-3245 is considered a medium severity vulnerability due to the potential for sensitive information disclosure.

How do I fix CVE-2011-3245?

To resolve CVE-2011-3245, users should update their Apple iOS devices to version 5 or later, where the issue is addressed.

Which versions of iOS are affected by CVE-2011-3245?

CVE-2011-3245 affects Apple iOS versions prior to 5, including versions 3.1 to 4.3.5.

Who is at risk with CVE-2011-3245?

Physically proximate attackers can easily exploit CVE-2011-3245 to retrieve sensitive information from devices that are running vulnerable versions of iOS.

Vulnerability/
CVE-2011-3245

low

2.1

CWE

255

14/10/2011

6/8/2024

CVE-2011-3245

First published: Fri Oct 14 2011(Updated: )

The Keyboards component in Apple iOS before 5 displays the final character of an entered password during a subsequent use of a keyboard, which allows physically proximate attackers to obtain sensitive information by reading this character.

Credit: product-security@apple.com

Affected Software	Affected Version	How to fix
Apple iPhone OS	=4.0
Apple iPhone OS	=4.3.2
Apple iPhone OS	=4.0.2
Apple iPhone OS	=4.0.1
Apple iPhone OS	=3.2
Apple iPhone OS	=4.2.8
Apple iPhone OS	=4.1
Apple iPhone OS	=3.1.2
Apple iPhone OS	=4.3.5
Apple iPhone OS	=3.1.3
Apple iPhone OS	=4.3.1
Apple iPhone OS	=4.2.5
Apple iPhone OS	=3.2.1
Apple iPhone OS	=3.1
Apple iPhone OS	=4.3.5
Apple iPhone OS	=3.1
Apple iPhone OS	=3.2
Apple iPhone OS	=4.3.5
Apple iPhone OS	=4.2.1
Apple iPhone OS	=3.0
Apple iPhone OS	=4.0.1
Apple iPhone OS	=4.3.3
Apple iPhone OS	=4.0.1
Apple iPhone OS	=4.0
Apple iPhone OS	=3.1
Apple iPhone OS	=4.0
Apple iPhone OS	=4.3.0
Apple iPhone OS	=3.2.1
Apple iPhone OS	=3.2.2

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2011-3245?
CVE-2011-3245 is considered a medium severity vulnerability due to the potential for sensitive information disclosure.
How do I fix CVE-2011-3245?
To resolve CVE-2011-3245, users should update their Apple iOS devices to version 5 or later, where the issue is addressed.
Which versions of iOS are affected by CVE-2011-3245?
CVE-2011-3245 affects Apple iOS versions prior to 5, including versions 3.1 to 4.3.5.
What type of information can be exposed by CVE-2011-3245?
CVE-2011-3245 can expose the final character of an entered password during subsequent keyboard use.
Who is at risk with CVE-2011-3245?
Physically proximate attackers can easily exploit CVE-2011-3245 to retrieve sensitive information from devices that are running vulnerable versions of iOS.

collector/nvd-historical
collector/nvd-index
agent/references
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/author
agent/severity
agent/last-modified-date
agent/weakness
agent/description
agent/first-publish-date
agent/tags
agent/event
agent/source
vendor/apple
canonical/apple iphone os
version/apple iphone os/4.0
version/apple iphone os/4.3.2
version/apple iphone os/4.0.2
version/apple iphone os/4.0.1
version/apple iphone os/3.2
version/apple iphone os/4.2.8
version/apple iphone os/4.1
version/apple iphone os/3.1.2
version/apple iphone os/4.3.5
version/apple iphone os/3.1.3
version/apple iphone os/4.3.1
version/apple iphone os/4.2.5
version/apple iphone os/3.2.1
version/apple iphone os/3.1
version/apple iphone os/4.2.1
version/apple iphone os/3.0
version/apple iphone os/4.3.3
version/apple iphone os/4.3.0
version/apple iphone os/3.2.2

Frequently Asked Questions

What is the severity of CVE-2011-3245?
CVE-2011-3245 is considered a medium severity vulnerability due to the potential for sensitive information disclosure.
How do I fix CVE-2011-3245?
To resolve CVE-2011-3245, users should update their Apple iOS devices to version 5 or later, where the issue is addressed.
Which versions of iOS are affected by CVE-2011-3245?
CVE-2011-3245 affects Apple iOS versions prior to 5, including versions 3.1 to 4.3.5.
What type of information can be exposed by CVE-2011-3245?
CVE-2011-3245 can expose the final character of an entered password during subsequent keyboard use.
Who is at risk with CVE-2011-3245?
Physically proximate attackers can easily exploit CVE-2011-3245 to retrieve sensitive information from devices that are running vulnerable versions of iOS.

CVE-2011-3245

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2011-3245?

How do I fix CVE-2011-3245?

Which versions of iOS are affected by CVE-2011-3245?

What type of information can be exposed by CVE-2011-3245?

Who is at risk with CVE-2011-3245?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2011-3245?

How do I fix CVE-2011-3245?

Which versions of iOS are affected by CVE-2011-3245?

What type of information can be exposed by CVE-2011-3245?

Who is at risk with CVE-2011-3245?