Unscored CVE-2012-3741 EUVD-2012-3688GHSA-9r92-jm28-mfmj

The Restrictions (aka Parental Controls) implementation in Apple iOS before 6 does not properly handle purchase attempts after a Disable Re…

Published Sep 20, 2012 · Updated Aug 6, 2024 · Assigned by apple

Description

The Restrictions (aka Parental Controls) implementation in Apple iOS before 6 does not properly handle purchase attempts after a Disable Restrictions action, which allows local users to bypass an intended Apple ID authentication step via an app that performs purchase transactions.

References

apple-ios-restrictions-cve20123741(78721) vdb-entry
APPLE-SA-2012-09-19-1 vendor-advisory
http://support.apple.com/kb/HT5503