CVE-2010-0038
Summary
| CVE | CVE-2010-0038 |
|---|---|
| State | PUBLISHED |
| Assigner | apple |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2010-02-03 19:30:00 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | Recovery Mode in Apple iPhone OS 1.0 through 3.1.2, and iPhone OS for iPod touch 1.1 through 3.1.2, allows physically proximate attackers to bypass device locking, and read or modify arbitrary data, via a USB control message that triggers memory corruption. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
LocalAccess Complexity
LowAuthentication
NoneConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:L/AC:L/Au:N/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Apple | Iphone Os | 1.0 | All | All | All |
| Operating System | Apple | Iphone Os | 1.0.0 | All | All | All |
| Operating System | Apple | Iphone Os | 1.0.1 | All | All | All |
| Operating System | Apple | Iphone Os | 1.0.1 | - | iphone | All |
| Operating System | Apple | Iphone Os | 1.0.2 | All | All | All |
| Operating System | Apple | Iphone Os | 1.0.2 | - | iphone | All |
| Operating System | Apple | Iphone Os | 1.1 | All | All | All |
| Operating System | Apple | Iphone Os | 1.1.0 | All | All | All |
| Operating System | Apple | Iphone Os | 1.1.0 | - | iphone | All |
| Operating System | Apple | Iphone Os | 1.1.0 | - | ipodtouch | All |
| Operating System | Apple | Iphone Os | 1.1.1 | All | All | All |
| Operating System | Apple | Iphone Os | 1.1.1 | - | iphone | All |
| Operating System | Apple | Iphone Os | 1.1.2 | All | All | All |
| Operating System | Apple | Iphone Os | 1.1.2 | - | iphone | All |
| Operating System | Apple | Iphone Os | 1.1.2 | - | ipodtouch | All |
| Operating System | Apple | Iphone Os | 1.1.3 | All | All | All |
| Operating System | Apple | Iphone Os | 1.1.3 | - | iphone | All |
| Operating System | Apple | Iphone Os | 1.1.3 | - | ipodtouch | All |
| Operating System | Apple | Iphone Os | 1.1.4 | All | All | All |
| Operating System | Apple | Iphone Os | 1.1.4 | - | iphone | All |
| Operating System | Apple | Iphone Os | 1.1.4 | - | ipodtouch | All |
| Operating System | Apple | Iphone Os | 1.1.5 | All | All | All |
| Operating System | Apple | Iphone Os | 1.1.5 | - | iphone | All |
| Operating System | Apple | Iphone Os | 1.1.5 | - | ipodtouch | All |
| Operating System | Apple | Iphone Os | 2.0 | All | All | All |
| Operating System | Apple | Iphone Os | 2.0.0 | All | All | All |
| Operating System | Apple | Iphone Os | 2.0.0 | - | iphone | All |
| Operating System | Apple | Iphone Os | 2.0.0 | - | ipodtouch | All |
| Operating System | Apple | Iphone Os | 2.0.1 | All | All | All |
| Operating System | Apple | Iphone Os | 2.0.1 | - | iphone | All |
| Operating System | Apple | Iphone Os | 2.0.1 | - | ipodtouch | All |
| Operating System | Apple | Iphone Os | 2.0.2 | All | All | All |
| Operating System | Apple | Iphone Os | 2.0.2 | - | iphone | All |
| Operating System | Apple | Iphone Os | 2.0.2 | - | ipodtouch | All |
| Operating System | Apple | Iphone Os | 2.1 | All | All | All |
| Operating System | Apple | Iphone Os | 2.1 | - | iphone | All |
| Operating System | Apple | Iphone Os | 2.1 | - | ipodtouch | All |
| Operating System | Apple | Iphone Os | 2.1.1 | All | All | All |
| Operating System | Apple | Iphone Os | 2.2 | All | All | All |
| Operating System | Apple | Iphone Os | 2.2 | - | iphone | All |
| Operating System | Apple | Iphone Os | 2.2 | - | ipodtouch | All |
| Operating System | Apple | Iphone Os | 2.2.1 | All | All | All |
| Operating System | Apple | Iphone Os | 2.2.1 | - | iphone | All |
| Operating System | Apple | Iphone Os | 2.2.1 | - | ipodtouch | All |
| Operating System | Apple | Iphone Os | 3.0 | All | All | All |
| Operating System | Apple | Iphone Os | 3.0 | - | ipodtouch | All |
| Operating System | Apple | Iphone Os | 3.0.1 | All | All | All |
| Operating System | Apple | Iphone Os | 3.0.1 | - | iphone | All |
| Operating System | Apple | Iphone Os | 3.1.2 | All | All | All |
| Operating System | Apple | Iphone Os | 3.1.2 | - | ipodtouch | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| APPLE-SA-2010-02-02-1 iPhone OS 3.1.3 and iPhone OS 3.1.3 for iPod touch | af854a3a-2127-422b-91ae-364da2661108 | lists.apple.com | Vendor Advisory |
| About the security content of iOS 3.1.3 and iOS 3.1.3 for iPod touch | af854a3a-2127-422b-91ae-364da2661108 | support.apple.com | Vendor Advisory |
| Apple iPhone and iPod touch USB Control Message Security Bypass Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| osvdb.org/62128 | af854a3a-2127-422b-91ae-364da2661108 | osvdb.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.