Description
The Settings component in Apple iOS before 5, when a configuration profile is used for a locale other than English, does not properly implement localization, which makes it easier for attackers to have an unspecified impact by leveraging incorrect configuration display.
References
- APPLE-SA-2011-10-12-1 vendor-advisory
- appleios-config-settings-sec-bypass(70560) vdb-entry
- http://support.apple.com/kb/HT4999
- 76330 vdb-entry