CVE-2012-3741: Low severity iphone os vulnerability
The Restrictions (aka Parental Controls) implementation in Apple iOS before 6 does not properly handle purchase attempts after a Disable Restrictions action, which allows local users to bypass an intended Apple ID authentication step via an app that performs purchase transactions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-3741?
CVE-2012-3741 is considered a moderate severity vulnerability due to the potential for local users to bypass authentication for purchase transactions.
How do I fix CVE-2012-3741?
To fix CVE-2012-3741, upgrade to iOS version 6 or later.
Who is affected by CVE-2012-3741?
CVE-2012-3741 affects all versions of Apple iOS prior to 6, including versions 1.0.0 through 5.1.1.
What types of devices are vulnerable to CVE-2012-3741?
The vulnerable devices include iPhones, iPads, and iPod Touches running affected versions of iOS.
What happens if CVE-2012-3741 is exploited?
If exploited, CVE-2012-3741 allows a local user to bypass Apple ID authentication, leading to unauthorized purchases.