Apple iPhone prior to 3.1 SMS Message NULL-Pointer Dereference Vulnerability

Bugtraq ID:	36336
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2009-2815
Remote:	Yes
Local:	No
Published:	Sep 09 2009 12:00AM
Updated:	Sep 10 2009 03:51PM
Credit:	Charlie Miller of Independent Security Evaluators and Collin Mulliner of Technical University Berlin.
Vulnerable:	Apple iPhone 3.0.1 Apple iPhone 2.2.1 Apple iPhone 2.0.2 Apple iPhone 2.0.1 Apple iPhone 1.1.4 Apple iPhone 1.1.3 Apple iPhone 1.1.2 Apple iPhone 1.1.1 Apple iPhone 1.0.2 Apple iPhone 1.0.1 Apple iPhone 3.0 Apple iPhone 2.2 Apple iPhone 2.1 Apple iPhone 2.0 Apple iPhone 1.1 Apple iPhone 1 Apple iPhone 0
Not Vulnerable:	Apple iPhone 3.1

Apple iPhone prior to 3.1 SMS Message NULL-Pointer Dereference Vulnerability

Apple iPhone is prone to a NULL-pointer dereference vulnerability.

Successful exploits may allow attackers to cause the affected service to become unresponsive.

This issue affects iPhone OS 1.0 through 3.0.1.

This issue was previously covered in BID 36326 (Apple iPhone prior to 3.1 and iPod touch Prior to 3.1.1 Multiple Vulnerabilities) but has been given its own record to better document it.

Apple iPhone prior to 3.1 SMS Message NULL-Pointer Dereference Vulnerability

Attackers can use readily available networking tools to exploit this issue.

Apple iPhone prior to 3.1 SMS Message NULL-Pointer Dereference Vulnerability

Solution:
The vendor has released an advisory and fixes. Please see the references for details.

Apple iPhone prior to 3.1 SMS Message NULL-Pointer Dereference Vulnerability

References:

• iPhone Product Page (Apple)