VendorsAppleiphone_os4.2.9
Vulnerabilities

Apple iPhone OS 4.2.9

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

3CVEs
CVE-2011-3441
libinfo in Apple iOS before 5.0.1 does not properly formulate domain-name queries, which allows remote attackers to obtain sensitive information via a crafted DNS hostname.
Published 2011-11-11 · Modified
4.3EPSS 0.016
CVE-2011-3254
Cross-site scripting (XSS) vulnerability in Calendar in Apple iOS before 5 allows remote attackers to inject arbitrary web script or HTML via an invitation note.
Published 2011-10-14 · Modified
4.3EPSS 0.013
CVE-2011-3440
The Passcode Lock feature in Apple iOS before 5.0.1 on the iPad 2 does not properly implement the locked state, which allows physically proximate attackers to access data by opening a Smart Cover during power-off confirmation.
Published 2011-11-11 · Modified
1.2EPSS 0.003