PT-2008-3143 · Apple · Iphone+2

Sergio Alvarez + 1 · Publicado 2008-11-25 · Atualizado 2024-06-15 · CVE-2008-1586

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Apple iPhone OS versions 1.0 through 2.1 iPhone OS for iPod touch versions 1.1 through 2.1

Description The issue allows remote attackers to cause a denial of service, resulting in memory consumption and device reset, via a crafted TIFF image.

Recommendations For Apple iPhone OS versions 1.0 through 2.1, update to a version outside of this range to resolve the issue. For iPhone OS for iPod touch versions 1.1 through 2.1, update to a version outside of this range to resolve the issue. As a temporary workaround, consider avoiding the use of crafted TIFF images until a patch is available.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2008-1586

OPENSUSE-SU-2024:11461-1

Produtos afetados

Iphone

Ios

Ipod Touch

Referências · 59

• https://suse.com/security/cve/CVE-2018-17100 · Nota
• https://suse.com/security/cve/CVE-2017-9404 · Nota
• https://suse.com/security/cve/CVE-2016-10266 · Nota
• https://t.me/cvenotify/34428 · Publicação no Telegram
• https://suse.com/security/cve/CVE-2008-1586 · Nota
• http://support.apple.com/kb/HT3318 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2006-2656 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:11461-1 · Aviso do Fabricante
• http://securityfocus.com/bid/32394 · Nota
• https://suse.com/security/cve/CVE-2016-10270 · Nota
• https://suse.com/security/cve/CVE-2016-9538 · Nota
• https://suse.com/security/cve/CVE-2016-10272 · Nota
• https://suse.com/security/cve/CVE-2017-7594 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2017-7602 · Nota