PT-2009-3542 · Apple · Ios+1

Aviv Raff + 8 · Publicado 2009-06-19 · Atualizado 2022-08-09 · CVE-2009-0960

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple iPhone OS versions 1.0 through 2.2.1 Apple iPhone OS for iPod touch versions 1.1 through 2.2.1

Description The issue concerns the Mail component, which does not offer an option to disable remote image loading in HTML emails. This allows remote attackers to determine the device's address and when an email is read by sending an HTML email that contains an image URL.

Recommendations For Apple iPhone OS versions 1.0 through 2.2.1, consider disabling HTML email rendering until a fix is available. For Apple iPhone OS for iPod touch versions 1.1 through 2.2.1, consider disabling HTML email rendering until a fix is available.

Correção

Identificadores relacionados

CVE-2009-0960

Produtos afetados

Ios

Ipod Touch

Referências · 7

• http://vupen.com/english/advisories/2009/1621 · Aviso do Fabricante
• http://support.apple.com/kb/HT3639 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51209 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-0960 · Nota de Segurança
• http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html · Aviso do Fabricante
• http://securityfocus.com/bid/35434 · Nota
• http://securityfocus.com/bid/35414 · Nota