PT-2010-2891 · Apple · Ios+1

Publicado 2010-03-29 · Atualizado 2012-03-30 · CVE-2010-1181

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Safari on Apple iPhone OS version 3.1.3 for iPod touch

Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, or possibly execute arbitrary code. This is achieved by using a long string in a MARQUEE element.

Recommendations For Safari on Apple iPhone OS version 3.1.3 for iPod touch, consider avoiding the use of long strings in MARQUEE elements until a fix is available. As a temporary workaround, restricting the handling of MARQUEE elements may help minimize the risk of exploitation.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2010-1181

Produtos afetados

Safari

Ios

Referências · 2

• 🔥 http://nishantdaspatnaik.yolasite.com/ipodpoc6.php · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-1181 · Nota de Segurança