PT-2008-3143 · Apple · Iphone+2

Sergio Alvarez + 1 · Published 2008-11-25 · Updated 2024-06-15 · CVE-2008-1586

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Apple iPhone OS versions 1.0 through 2.1 iPhone OS for iPod touch versions 1.1 through 2.1

Description The issue allows remote attackers to cause a denial of service, resulting in memory consumption and device reset, via a crafted TIFF image.

Recommendations For Apple iPhone OS versions 1.0 through 2.1, update to a version outside of this range to resolve the issue. For iPhone OS for iPod touch versions 1.1 through 2.1, update to a version outside of this range to resolve the issue. As a temporary workaround, consider avoiding the use of crafted TIFF images until a patch is available.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2008-1586

OPENSUSE-SU-2024:11461-1

Affected Products

Iphone

Ios

Ipod Touch

References · 59

• http://support.apple.com/kb/HT3318 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11461-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-1586 · Security Note
• http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html · Vendor Advisory
• https://suse.com/security/cve/CVE-2018-17100 · Note
• https://suse.com/security/cve/CVE-2017-9404 · Note
• https://suse.com/security/cve/CVE-2016-10266 · Note
• https://t.me/cvenotify/34428 · Telegram Post
• https://suse.com/security/cve/CVE-2008-1586 · Note
• https://suse.com/security/cve/CVE-2006-2656 · Note
• http://securityfocus.com/bid/32394 · Note
• https://suse.com/security/cve/CVE-2016-10270 · Note
• https://suse.com/security/cve/CVE-2016-9538 · Note
• https://suse.com/security/cve/CVE-2016-10272 · Note