CVE-2014-1274

iPhone OS < 7.0.6 - Unauthenticated Sensitive Information Exposure via FaceTime Lock Screen

Title source: llm
STIX 2.1

Description

FaceTime in Apple iOS before 7.1 allows physically proximate attackers to obtain sensitive FaceTime contact information by using the lock screen for an invalid FaceTime call.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_confirm
http://support.apple.com/kb/HT6162

Scores

EPSS 0.0036
EPSS Percentile 28.3%

Details

CWE
CWE-200
Status published
Products (7)
apple/iphone_os 7.0
apple/iphone_os 7.0.1
apple/iphone_os 7.0.2
apple/iphone_os 7.0.3
apple/iphone_os 7.0.4
apple/iphone_os 7.0.5
apple/iphone_os < 7.0.6
Published Mar 14, 2014
Tracked Since Feb 18, 2026