PT-2009-3541 · Apple+1 · Ios+1

Si Brindley · Publicado 2009-06-19 · Atualizado 2022-08-09 · CVE-2009-0959

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Apple iPhone OS versions 1.0 through 2.2.1 Apple iPhone OS for iPod touch versions 1.1 through 2.2.1

Description The issue is related to the MPEG-4 video codec, which allows remote attackers to cause a denial of service, resulting in a device reset. This is achieved through a crafted MPEG-4 video file that triggers an input validation issue.

Recommendations For Apple iPhone OS versions 1.0 through 2.2.1, update to a version outside of this range to resolve the issue. For Apple iPhone OS for iPod touch versions 1.1 through 2.2.1, update to a version outside of this range to resolve the issue. As a temporary workaround, consider avoiding the use of the MPEG-4 video codec until a patch is available.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2009-0959

Produtos afetados

Mpeg-4

Ios

Referências · 8

• http://support.apple.com/kb/HT3639 · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51211 · Nota
• http://securityfocus.com/bid/35414 · Nota
• http://osvdb.org/55237 · Nota
• http://vupen.com/english/advisories/2009/1621 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-0959 · Nota de Segurança
• http://securityfocus.com/bid/35433 · Nota