CVE-2011-3255: Medium severity iphone os vulnerability
Published Oct 14, 2011
·Updated
CFNetwork in Apple iOS before 5 stores AppleID credentials in an unspecified file, which makes it easier for remote attackers to obtain sensitive information via a crafted application.
Affected Software
29 affected components
apple iPhone OS=4.0
apple iPhone OS=4.3.2
apple iPhone OS=4.0.2
apple iPhone OS=4.0.1
apple iPhone OS=3.2
apple iPhone OS=4.2.8
apple iPhone OS=4.1
apple iPhone OS=3.1.2
apple iPhone OS=4.3.5
apple iPhone OS=3.1.3
apple iPhone OS=4.3.1
apple iPhone OS=4.2.5
apple iPhone OS=3.2.1
apple iPhone OS=3.1
apple iPhone OS=4.3.5
apple iPhone OS=3.1
apple iPhone OS=3.2
apple iPhone OS=4.3.5
apple iPhone OS=4.2.1
apple iPhone OS=3.0
apple iPhone OS=4.0.1
apple iPhone OS=4.3.3
apple iPhone OS=4.0.1
apple iPhone OS=4.0
apple iPhone OS=3.1
apple iPhone OS=4.0
apple iPhone OS=4.3.0
apple iPhone OS=3.2.1
apple iPhone OS=3.2.2
Event History
Oct 14, 2011
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-3255?
CVE-2011-3255 has been assigned a medium severity rating due to potential unauthorized access to AppleID credentials.
2
How do I fix CVE-2011-3255?
To fix CVE-2011-3255, users should update their Apple iOS devices to a version 5 or higher.
3
Which versions of Apple iOS are affected by CVE-2011-3255?
CVE-2011-3255 affects Apple iOS versions up to 4.3.5, including versions 3.0 through 4.3.5.
4
What kind of information can be compromised due to CVE-2011-3255?
CVE-2011-3255 can lead to the compromise of AppleID credentials stored in an insecure file.
5
Is there a known exploit for CVE-2011-3255?
Yes, CVE-2011-3255 can be exploited by remote attackers through crafted applications that access stored AppleID credentials.