CVE-2011-3430

The Settings component in Apple iOS before 5, when a configuration profile is used for a locale other than English, does not properly implement localization, which makes it easier for attackers to have an unspecified impact by leveraging incorrect configuration display.

Score

CVSS 2.0 9.3 Critical

Status

Modified - product-security@apple.com

Published

2011-10-14

Last modified

2024-08-06

Affected products

• Iphone Os (Apple)

References

• http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html
• http://osvdb.org/76330
• http://support.apple.com/kb/HT4999
• https://exchange.xforce.ibmcloud.com/vulnerabilities/70560