RETIRED: Apple iPhone/iPod touch Prior to iOS 4.1 Multiple Vulnerabilities
BID:43070
Info
RETIRED: Apple iPhone/iPod touch Prior to iOS 4.1 Multiple Vulnerabilities
| Bugtraq ID: | 43070 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Sep 08 2010 12:00AM |
| Updated: | Sep 08 2010 12:00AM |
| Credit: | Robin Kipp of Forever Living Products Europe, Aaron Sigel of vtty.com, Tom Ferris of Adobe PSIRT, James Robinson of Google, Inc, Ojan Vafai of Google, Inc, Jose A. Vazquez of spa-s3c.blogspot.com, Csaba Osztrogonac of University of Szeged, Tony Chang of |
| Vulnerable: |
Apple iPod Touch 3.1.3 Apple iPod Touch 3.1.2 Apple iPod Touch 3.1.1 Apple iPod Touch 2.2.1 Apple iPod Touch 2.0.2 Apple iPod Touch 2.0.1 Apple iPod Touch 3.0 Apple iPod Touch 2.2 Apple iPod Touch 2.1 Apple iPod Touch 2.0 Apple iPhone 4.0.1 Apple iPhone 3.2.1 Apple iPhone 3.1.3 Apple iPhone 3.1.2 Apple iPhone 3.0.1 Apple iPhone 2.2.1 Apple iPhone 2.0.2 Apple iPhone 2.0.1 Apple iPhone 4.0.1 - Iphone Apple iPhone 4.0 - Ipodtouch Apple iPhone 4.0 - Iphone Apple iPhone 4.0 Apple iPhone 3.2.1 - Ipad Apple iPhone 3.2 - Ipodtouch Apple iPhone 3.2 - Iphone Apple iPhone 3.2 Apple iPhone 3.1.3 - Ipodtouch Apple iPhone 3.1.3 - Iphone Apple iPhone 3.1.2 - Ipodtouch Apple iPhone 3.1.2 - Iphone Apple iPhone 3.1 - Ipodtouch Apple iPhone 3.1 - Iphone Apple iPhone 3.1 Apple iPhone 3.0.1 - Ipodtouch Apple iPhone 3.0.1 - Iphone Apple iPhone 3.0 - Ipodtouch Apple iPhone 3.0 - Iphone Apple iPhone 3.0 Apple iPhone 2.2.1 - Ipodtouch Apple iPhone 2.2.1 - Iphone Apple iPhone 2.2 - Ipodtouch Apple iPhone 2.2 - Iphone Apple iPhone 2.2 Apple iPhone 2.1 - Ipodtouch Apple iPhone 2.1 - Iphone Apple iPhone 2.1 Apple iPhone 2.0 Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 3.2.2 Apple iOS 3.2.1 Apple iOS 4 Apple iOS 3.2 Apple iOS 2.0 |
| Not Vulnerable: |
Apple iOS 4.1 |
Discussion
RETIRED: Apple iPhone/iPod touch Prior to iOS 4.1 Multiple Vulnerabilities
Apple iOS for iPhone and iPod touch is prone to multiple security vulnerabilities, These issues affect the following components:
Accessibility
FaceTime
ImageIO
WebKit
Successfully exploiting these issues may allow attackers to crash the affected device, bypass security restrictions, obtain sensitive information, or execute arbitrary code. Other attacks are also possible.
This BID is being retired. The following individual records exist to better document the issues:
43075 Apple iPhone/iPod touch User Interface Accessibility Security Vulnerability
43076 Apple iPhone/iPod Touch 'ImageIO' Component Memory Corruption Vulnerability
43077 WebKit for Apple iPhone/iPod Touch (CVE-2010-1781) Remote Code Execution Vulnerability
43078 WebKit for Apple iPhone/iPod touch HTML Objects Memory Corruption Vulnerability
43079 WebKit for Apple iPhone/iPod touch Prior to iOS 4.1 Remote Code Execution Vulnerability
43080 Apple iPhone/iPod touch 'ImageIO' Component Buffer Overflow Vulnerability
43081 WebKit for Apple iPhone/iPod touch Prior to iOS 4.1 Remote Code Execution Vulnerability
43082 Apple iPhone/iPod touch FaceTime Call Redirection Security Vulnerability
43083 WebKit for Apple iPhone/iPod touch Form Menus Memory Corruption Vulnerability
Apple iOS for iPhone and iPod touch is prone to multiple security vulnerabilities, These issues affect the following components:
Accessibility
FaceTime
ImageIO
WebKit
Successfully exploiting these issues may allow attackers to crash the affected device, bypass security restrictions, obtain sensitive information, or execute arbitrary code. Other attacks are also possible.
This BID is being retired. The following individual records exist to better document the issues:
43075 Apple iPhone/iPod touch User Interface Accessibility Security Vulnerability
43076 Apple iPhone/iPod Touch 'ImageIO' Component Memory Corruption Vulnerability
43077 WebKit for Apple iPhone/iPod Touch (CVE-2010-1781) Remote Code Execution Vulnerability
43078 WebKit for Apple iPhone/iPod touch HTML Objects Memory Corruption Vulnerability
43079 WebKit for Apple iPhone/iPod touch Prior to iOS 4.1 Remote Code Execution Vulnerability
43080 Apple iPhone/iPod touch 'ImageIO' Component Buffer Overflow Vulnerability
43081 WebKit for Apple iPhone/iPod touch Prior to iOS 4.1 Remote Code Execution Vulnerability
43082 Apple iPhone/iPod touch FaceTime Call Redirection Security Vulnerability
43083 WebKit for Apple iPhone/iPod touch Form Menus Memory Corruption Vulnerability
Exploit / POC
RETIRED: Apple iPhone/iPod touch Prior to iOS 4.1 Multiple Vulnerabilities
Some of these issues may not require specific exploit code and may be trivial to exploit.
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Some of these issues may not require specific exploit code and may be trivial to exploit.
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
RETIRED: Apple iPhone/iPod touch Prior to iOS 4.1 Multiple Vulnerabilities
Solution:
The vendor has released an advisory and fixes. Please see the references for details.
Solution:
The vendor has released an advisory and fixes. Please see the references for details.
References
RETIRED: Apple iPhone/iPod touch Prior to iOS 4.1 Multiple Vulnerabilities
References:
References:
- iOS Homepage (Apple)
- iPhone Product Page (Apple)
- iPod touch Product Page (Apple)