Description
Siri in Apple iOS before 7.1.2 allows physically proximate attackers to bypass an intended lock-screen passcode requirement, and read a contact list, via a Siri request that refers to a contact ambiguously.
References
- 68276 vdb-entry
- APPLE-SA-2014-06-30-3 vendor-advisory
- 1030500 vdb-entry