PT-2010-1863 · Apple · Iphone+2

Published 2010-02-03 · Updated 2021-05-23 · CVE-2010-0038

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple iPhone OS versions 1.0 through 3.1.2 Apple iPhone OS for iPod touch versions 1.1 through 3.1.2

Description The issue allows physically proximate attackers to bypass device locking and read or modify arbitrary data via a USB control message that triggers memory corruption.

Recommendations For Apple iPhone OS versions 1.0 through 3.1.2, update to a version later than 3.1.2 to resolve the issue. For Apple iPhone OS for iPod touch versions 1.1 through 3.1.2, update to a version later than 3.1.2 to resolve the issue.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2010-0038

Affected Products

Iphone

Ios

Ipod Touch

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2010-0038 · Security Note
• http://lists.apple.com/archives/security-announce/2010/Feb/msg00000.html · Vendor Advisory
• http://support.apple.com/kb/HT4013 · Vendor Advisory
• http://osvdb.org/62128 · Note
• http://securityfocus.com/bid/38040 · Note