Race condition in Passcode Lock in Apple iOS before 4 on the iPhone and iPod touch allows physically proximate attackers to bypass intended passcode requirements, and pair a locked device with a computer and access arbitrary data, via vectors involving the initial boot.
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Link | Tags |
---|---|
http://support.apple.com/kb/HT4225 | vendor advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/59637 | vdb entry |
http://www.securityfocus.com/bid/41016 | vdb entry |
http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html | vendor advisory |