PT-2010-1863 · Apple · Iphone+2

Publicado 2010-02-03 · Atualizado 2021-05-23 · CVE-2010-0038

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple iPhone OS versions 1.0 through 3.1.2 Apple iPhone OS for iPod touch versions 1.1 through 3.1.2

Description The issue allows physically proximate attackers to bypass device locking and read or modify arbitrary data via a USB control message that triggers memory corruption.

Recommendations For Apple iPhone OS versions 1.0 through 3.1.2, update to a version later than 3.1.2 to resolve the issue. For Apple iPhone OS for iPod touch versions 1.1 through 3.1.2, update to a version later than 3.1.2 to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2010-0038

Produtos afetados

Iphone

Ios

Ipod Touch

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2010-0038 · Nota de Segurança
• http://lists.apple.com/archives/security-announce/2010/Feb/msg00000.html · Aviso do Fabricante
• http://support.apple.com/kb/HT4013 · Aviso do Fabricante
• http://osvdb.org/62128 · Nota
• http://securityfocus.com/bid/38040 · Nota