Unscored severity · published Sep 2, 2008
CVE-2008-3876
Apple iPhone 2.0.2, in some configurations, allows physically proximate attackers to bypass intended access restrictions, and obtain sensitive information or make arbitrary use of…
–
CVSS
0.5%
EPSS
No
On KEV
Description
Apple iPhone 2.0.2, in some configurations, allows physically proximate attackers to bypass intended access restrictions, and obtain sensitive information or make arbitrary use of the device, via an Emergency Call tap and a Home double-tap, followed by a tap of any contact's blue arrow.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 39% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IP
Iphone · Apple
2.0.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-3876
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-3876
forums.macrumors.com
http://forums.macrumors.com/showpost.php?p=6121914&postcount=118
Exploit
http://forums.macrumors.com/showthread.php?t=551617
securitytracker.com
http://securitytracker.com/id?1020763
More from Iphone
6.5
CVE-2022-22592
A logic issue was addressed with improved state management
–
CVE-2008-4593
Apple iPhone 2.1 with firmware 5F136, when Require Passcode is enabled and Show SMS Preview is disabled, allows physically proximate attackers to obtain sensitive information by…
–
CVE-2008-3950
Off-by-one error in the _web_drawInRect:withFont:ellipsis:alignment:measureOnly function in WebKit in Safari in Apple iPhone 1.1.4 and 2.0 and iPod touch 1.1.4 and 2.0 allows…
–
CVE-2008-3632
Use-after-free vulnerability in WebKit in Apple iPod touch 1.1 through 2.0.2, and iPhone 1.0 through 2.0.2, allows remote attackers to execute arbitrary code or cause a denial of…
–
CVE-2008-0034
Unspecified vulnerability in Passcode Lock in Apple iPhone 1.0 through 1.1.2 allows users with physical access to execute applications without entering the passcode via vectors…