Apple iPhone/iPod touch 'ImageIO' Component Buffer Overflow Vulnerability
BID:43080
Info
Apple iPhone/iPod touch 'ImageIO' Component Buffer Overflow Vulnerability
| Bugtraq ID: | 43080 |
| Class: | Unknown |
| CVE: |
CVE-2010-1817 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 08 2010 12:00AM |
| Updated: | Sep 08 2010 12:00AM |
| Credit: | Tom Ferris of Adobe PSIRT |
| Vulnerable: |
Apple iPod Touch 3.1.3 Apple iPod Touch 3.1.2 Apple iPod Touch 3.1.1 Apple iPod Touch 2.2.1 Apple iPod Touch 2.0.2 Apple iPod Touch 2.0.1 Apple iPod Touch 3.0 Apple iPod Touch 2.2 Apple iPod Touch 2.1 Apple iPod Touch 2.0 Apple iPhone 4.0.1 Apple iPhone 3.2.1 Apple iPhone 3.1.3 Apple iPhone 3.1.2 Apple iPhone 3.0.1 Apple iPhone 2.2.1 Apple iPhone 2.0.2 Apple iPhone 2.0.1 Apple iPhone 4.0.1 - Iphone Apple iPhone 4.0 - Ipodtouch Apple iPhone 4.0 - Iphone Apple iPhone 4.0 Apple iPhone 3.2.1 - Ipad Apple iPhone 3.2 - Ipodtouch Apple iPhone 3.2 - Iphone Apple iPhone 3.2 Apple iPhone 3.1.3 - Ipodtouch Apple iPhone 3.1.3 - Iphone Apple iPhone 3.1.2 - Ipodtouch Apple iPhone 3.1.2 - Iphone Apple iPhone 3.1 - Ipodtouch Apple iPhone 3.1 - Iphone Apple iPhone 3.1 Apple iPhone 3.0.1 - Ipodtouch Apple iPhone 3.0.1 - Iphone Apple iPhone 3.0 - Ipodtouch Apple iPhone 3.0 - Iphone Apple iPhone 3.0 Apple iPhone 2.2.1 - Ipodtouch Apple iPhone 2.2.1 - Iphone Apple iPhone 2.2 - Ipodtouch Apple iPhone 2.2 - Iphone Apple iPhone 2.2 Apple iPhone 2.1 - Ipodtouch Apple iPhone 2.1 - Iphone Apple iPhone 2.1 Apple iPhone 2.0 Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 3.2.2 Apple iOS 3.2.1 Apple iOS 4 Apple iOS 3.2 Apple iOS 2.0 |
| Not Vulnerable: |
Apple iOS 4.1 |
Discussion
Apple iPhone/iPod touch 'ImageIO' Component Buffer Overflow Vulnerability
Apple iOS for iPhone and iPod touch is prone to a buffer-overflow vulnerability that affects the 'ImageIO' component.
Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application, or to crash the affected application.
This issue affects iOS 2.0 through 4.0.2 for iPhone 3G and later and iOS 2.1 through 4.0.2 for iPod touch (2nd generation) and later.
NOTE: This issue was previously discussed in BID 43070 (Apple iPhone/iPod touch Prior to iOS 4.1 Multiple Vulnerabilities) but has been given its own record to better document it.
Apple iOS for iPhone and iPod touch is prone to a buffer-overflow vulnerability that affects the 'ImageIO' component.
Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application, or to crash the affected application.
This issue affects iOS 2.0 through 4.0.2 for iPhone 3G and later and iOS 2.1 through 4.0.2 for iPod touch (2nd generation) and later.
NOTE: This issue was previously discussed in BID 43070 (Apple iPhone/iPod touch Prior to iOS 4.1 Multiple Vulnerabilities) but has been given its own record to better document it.
Exploit / POC
Apple iPhone/iPod touch 'ImageIO' Component Buffer Overflow Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Apple iPhone/iPod touch 'ImageIO' Component Buffer Overflow Vulnerability
Solution:
The vendor has released an advisory and fixes. Please see the references for details.
Solution:
The vendor has released an advisory and fixes. Please see the references for details.
References
Apple iPhone/iPod touch 'ImageIO' Component Buffer Overflow Vulnerability
References:
References:
- iOS Homepage (Apple)
- iPhone Product Page (Apple)
- iPod touch Product Page (Apple)