vulnwire
3.7low

CVE-2008-4229

Race condition in the Passcode Lock feature in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.0 through 2.1 allows physical…

Published 17 y ago · modified 4 mo ago · JSON

CVSS
3.7
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.2%
percentile 16%
Public exploits
0
none known

Race condition in the Passcode Lock feature in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.0 through 2.1 allows physically proximate attackers to remove the lock and launch arbitrary applications by restoring the device from a backup.

Exploit prediction (EPSS)

0.24% probability of exploitation in the next 30 days, higher than 16% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.03.7AV:L/AC:H/Au:N/C:P/I:P/A:P

Classification

Weakness
  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization

References

  • securitytracker.com /id?1021271 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • lists.apple.com /archives/security-announce/2008/Nov/msg00002.html · vendor-advisory, x_refsource_APPLE, x_transferred
  • osvdb.org /50026 · vdb-entry, x_refsource_OSVDB, x_transferred
  • vupen.com /english/advisories/2008/3232 · vdb-entry, x_refsource_VUPEN, x_transferred
  • support.apple.com /kb/HT3318 · x_refsource_CONFIRM, x_transferred
  • securityfocus.com /bid/32394 · vdb-entry, x_refsource_BID, x_transferred
  • secunia.com /advisories/32756 · third-party-advisory, x_refsource_SECUNIA, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.