cbcvebase.
CVE-2012-3741
published 2012-09-20

CVE-2012-3741: The Restrictions (aka Parental Controls) implementation in Apple iOS before 6 does not properly handle purchase attempts after a Disable Restrictions action…

PriorityP47low1.9CVSS 2.0
AVLACMAuNCNIPAN
EPSS
0.34%
26.9th percentile
The Restrictions (aka Parental Controls) implementation in Apple iOS before 6 does not properly handle purchase attempts after a Disable Restrictions action, which allows local users to bypass an intended Apple ID authentication step via an app that performs purchase transactions.

Affected

40 ranges· showing 25
VendorProductVersion rangeFixed in
appleiphone_os<= 5.1.1—
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.