RETIRED: Apple iPhone/iPod touch Prior to iOS 4 Multiple Vulnerabilities
BID:41016
Info
RETIRED: Apple iPhone/iPod touch Prior to iOS 4 Multiple Vulnerabilities
| Bugtraq ID: | 41016 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Jun 21 2010 12:00AM |
| Updated: | Jun 23 2010 04:08PM |
| Credit: | Zac White; Laurent OUDOT of TEHTRI-Security; Ladd Van Tol of Critical Path Software; Apple; Jason Dent of Street Side Software; Sidney San Martin of DeepTech, Inc.; Wilfried Teiken; Darin Fisher of Google Inc.; Wayne Pan of AdMob, Inc.; wushi of team509. |
| Vulnerable: |
Apple iPod Touch 3.1.3 Apple iPod Touch 3.1.2 Apple iPod Touch 3.1.1 Apple iPod Touch 2.2.1 Apple iPod Touch 2.0.2 Apple iPod Touch 2.0.1 Apple iPod Touch 3.0 Apple iPod Touch 2.2 Apple iPod Touch 2.1 Apple iPod Touch 2.0 Apple iPod Touch 0 Apple iPhone 3.1.3 Apple iPhone 3.1.2 Apple iPhone 3.0.1 Apple iPhone 2.2.1 Apple iPhone 2.0.2 Apple iPhone 2.0.1 Apple iPhone 3.1 Apple iPhone 3.0 Apple iPhone 2.2 Apple iPhone 2.1 Apple iPhone 2.0 Apple iPhone 0 |
| Not Vulnerable: |
Apple iOS 4 |
Discussion
RETIRED: Apple iPhone/iPod touch Prior to iOS 4 Multiple Vulnerabilities
Apple iOS for iPhone and iPod touch is prone to multiple security vulnerabilities, including information-disclosure, remote code-execution, denial-of-service, security-bypass, and spoofing issues. These issues affect the Sandbox, CFNetwork, ImageIO, Passcode Lock, Safari, Settings, and WebKit components.
Successfully exploiting these issues may allow attackers to crash the affected device, bypass security restrictions, obtain sensitive information, or execute arbitrary code. Other attacks are also possible.
Versions prior to iOS 4 are vulnerable.
This BID is being retired. The following individual records exist to better document the issues:
41047 Apple iPhone and iPod touch Application Sandbox User Photo Library Security Bypass Vulnerability
41048 Apple iPhone/iPod touch Prior to iOS 4 Wireless Network Security Weakness
41049 Apple iPhone/iPod touch Prior to iOS 4 URI Stack Based Buffer Overflow Vulnerability
41051 WebKit 'history.replaceState' Cross-Origin Information Disclosure Vulnerability
41052 Apple iPhone/iPod touch Prior to iOS 4 JPEG File Buffer Overflow Vulnerability
41053 WebKit 'JavaScriptCore' Page Transition Remote Code Execution Vulnerability
41054 WebKit Table Handling Remote Code Execution Vulnerability
41065 Apple iPhone/iPod touch Prior to iOS 4 Safari Security Bypass Vulnerability
41066 Apple iPhone and iPod touch Race Condition Security Bypass Vulnerability
41067 Apple iPhone/iPod touch Prior to iOS 4 Passcode Lock Authentication Bypass Vulnerability
41068 WebKit User Interface Cross Domain Spoofing Vulnerability
Apple iOS for iPhone and iPod touch is prone to multiple security vulnerabilities, including information-disclosure, remote code-execution, denial-of-service, security-bypass, and spoofing issues. These issues affect the Sandbox, CFNetwork, ImageIO, Passcode Lock, Safari, Settings, and WebKit components.
Successfully exploiting these issues may allow attackers to crash the affected device, bypass security restrictions, obtain sensitive information, or execute arbitrary code. Other attacks are also possible.
Versions prior to iOS 4 are vulnerable.
This BID is being retired. The following individual records exist to better document the issues:
41047 Apple iPhone and iPod touch Application Sandbox User Photo Library Security Bypass Vulnerability
41048 Apple iPhone/iPod touch Prior to iOS 4 Wireless Network Security Weakness
41049 Apple iPhone/iPod touch Prior to iOS 4 URI Stack Based Buffer Overflow Vulnerability
41051 WebKit 'history.replaceState' Cross-Origin Information Disclosure Vulnerability
41052 Apple iPhone/iPod touch Prior to iOS 4 JPEG File Buffer Overflow Vulnerability
41053 WebKit 'JavaScriptCore' Page Transition Remote Code Execution Vulnerability
41054 WebKit Table Handling Remote Code Execution Vulnerability
41065 Apple iPhone/iPod touch Prior to iOS 4 Safari Security Bypass Vulnerability
41066 Apple iPhone and iPod touch Race Condition Security Bypass Vulnerability
41067 Apple iPhone/iPod touch Prior to iOS 4 Passcode Lock Authentication Bypass Vulnerability
41068 WebKit User Interface Cross Domain Spoofing Vulnerability
Exploit / POC
RETIRED: Apple iPhone/iPod touch Prior to iOS 4 Multiple Vulnerabilities
Some of these issues may not require specific exploit code and may be trivial to exploit.
Currently we are not aware of any working exploits for issues that may require exploit code. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Some of these issues may not require specific exploit code and may be trivial to exploit.
Currently we are not aware of any working exploits for issues that may require exploit code. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
RETIRED: Apple iPhone/iPod touch Prior to iOS 4 Multiple Vulnerabilities
Solution:
The vendor has released an advisory and fixes. Please see the references for details.
Solution:
The vendor has released an advisory and fixes. Please see the references for details.
References
RETIRED: Apple iPhone/iPod touch Prior to iOS 4 Multiple Vulnerabilities
References:
References:
- iOS Homepage (Apple)
- iPhone Product Page (Apple)
- iPod touch Product Page (Apple)