PT-2009-3543 · Apple · Iphone+2

Collin Mulliner · Publicado 2009-06-19 · Atualizado 2022-08-09 · CVE-2009-0961

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Apple iPhone OS versions 1.0 through 2.2.1 Apple iPhone OS for iPod touch versions 1.1 through 2.2.1

Description The issue allows remote attackers to potentially force the iPhone to place a call without user approval. This occurs when the Mail component dismisses the call approval dialog upon the appearance of another alert, possibly triggered by an application.

Recommendations For Apple iPhone OS versions 1.0 through 2.2.1, update to a version outside of this range to resolve the issue. For Apple iPhone OS for iPod touch versions 1.1 through 2.2.1, update to a version outside of this range to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2009-0961

Produtos afetados

Iphone

Ios

Ipod Touch

Referências · 10

• 🔥 https://exploit-db.com/exploits/33045 · Exploit
• 🔥 https://exploit-db.com/exploits/33046 · Exploit
• 🔥 https://exploit-db.com/exploits/33044 · Exploit
• http://support.apple.com/kb/HT3639 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-0961 · Nota de Segurança
• http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html · Aviso do Fabricante
• http://osvdb.org/55238 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51210 · Nota
• http://securityfocus.com/bid/35414 · Nota
• http://vupen.com/english/advisories/2009/1621 · Nota