CVE-2011-3431: Infoleak
Published Oct 14, 2011
·Updated
The Home screen component in Apple iOS before 5 does not properly support a certain application-switching gesture, which might allow physically proximate attackers to obtain sensitive state information by watching the device's screen.
Affected Software
29 affected components
apple iPhone OS=4.0
apple iPhone OS=4.3.2
apple iPhone OS=4.0.2
apple iPhone OS=4.0.1
apple iPhone OS=3.2
apple iPhone OS=4.2.8
apple iPhone OS=4.1
apple iPhone OS=3.1.2
apple iPhone OS=4.3.5
apple iPhone OS=3.1.3
apple iPhone OS=4.3.1
apple iPhone OS=4.2.5
apple iPhone OS=3.2.1
apple iPhone OS=3.1
apple iPhone OS=4.3.5
apple iPhone OS=3.1
apple iPhone OS=3.2
apple iPhone OS=4.3.5
apple iPhone OS=4.2.1
apple iPhone OS=3.0
apple iPhone OS=4.0.1
apple iPhone OS=4.3.3
apple iPhone OS=4.0.1
apple iPhone OS=4.0
apple iPhone OS=3.1
apple iPhone OS=4.0
apple iPhone OS=4.3.0
apple iPhone OS=3.2.1
apple iPhone OS=3.2.2
Event History
Oct 14, 2011
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-3431?
CVE-2011-3431 is categorized as a low-severity vulnerability.
2
How do I fix CVE-2011-3431?
To fix CVE-2011-3431, update your Apple iOS device to version 5 or later.
3
What types of devices are affected by CVE-2011-3431?
CVE-2011-3431 affects Apple devices running iOS versions prior to 5.
4
What does CVE-2011-3431 exploit?
CVE-2011-3431 exploits a vulnerability in the Home screen component related to an application-switching gesture.
5
What kind of information can be exposed by CVE-2011-3431?
CVE-2011-3431 may allow attackers to obtain sensitive state information displayed on the device's screen.