Vulnerabilities > Apple > Iphone OS > Low

DATE CVE VULNERABILITY TITLE RISK
2009-06-19 CVE-2009-1679 Permissions, Privileges, and Access Controls vulnerability in Apple Iphone OS and Ipod Touch
The Profiles component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1, when installing a configuration profile, can replace the password policy from Exchange ActiveSync with a weaker password policy, which allows physically proximate attackers to bypass the intended policy.
local
low complexity
apple CWE-264
2.1
2009-06-19 CVE-2009-1680 Information Exposure vulnerability in Apple Iphone OS and Ipod Touch
Safari in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly clear the search history when it is cleared from the Settings application, which allows physically proximate attackers to obtain the search history.
local
low complexity
apple CWE-200
2.1
2008-11-25 CVE-2008-4228 Permissions, Privileges, and Access Controls vulnerability in Apple Iphone OS
The Passcode Lock feature in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allows physically proximate attackers to leverage the emergency-call ability of locked devices to make a phone call to an arbitrary number.
local
low complexity
apple CWE-264
3.6
2008-11-25 CVE-2008-4229 Race Condition vulnerability in Apple Iphone OS
Race condition in the Passcode Lock feature in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.0 through 2.1 allows physically proximate attackers to remove the lock and launch arbitrary applications by restoring the device from a backup.
local
high complexity
apple CWE-362
3.7
2008-11-25 CVE-2008-4230 Information Exposure vulnerability in Apple Iphone OS
The Passcode Lock feature in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 displays SMS messages when the emergency-call screen is visible, which allows physically proximate attackers to obtain sensitive information by reading these messages.
local
apple CWE-200
1.9
2008-11-25 CVE-2008-4233 Unspecified vulnerability in Apple Iphone OS and Safari
Safari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not isolate the call-approval dialog from the process of launching new applications, which allows remote attackers to make arbitrary phone calls via a crafted HTML document.
network
high complexity
apple
2.6