Vulnerability Details : CVE-2015-1064
Springboard in Apple iOS before 8.2 allows physically proximate attackers to bypass an intended activation requirement and read the home screen by leveraging an application crash during the activation process.
Vulnerability category: Information leak
Products affected by CVE-2015-1064
- cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2015-1064
0.10%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 42 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2015-1064
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
1.9
|
LOW | AV:L/AC:M/Au:N/C:P/I:N/A:N |
3.4
|
2.9
|
NIST |
CWE ids for CVE-2015-1064
-
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.Assigned by: nvd@nist.gov (Primary)
References for CVE-2015-1064
-
https://support.apple.com/HT204423
About the security content of iOS 8.2 - Apple SupportVendor Advisory
-
http://www.securitytracker.com/id/1031864
Apple iOS Multiple Bugs Let Remote Users Deny Service and Execute Arbitrary Code, Applications Gain Elevated Privileges, and Physically Local Users View the Home Screen - SecurityTracker
-
http://lists.apple.com/archives/security-announce/2015/Mar/msg00000.html
Apple - Lists.apple.comVendor Advisory
Jump to