Apple iOS Telephony Baseband Processor Heap Buffer Overflow Vulnerability

Bugtraq ID:	45011
Class:	Boundary Condition Error
CVE:	CVE-2010-3832
Remote:	Yes
Local:	No
Published:	Nov 22 2010 12:00AM
Updated:	Nov 22 2010 12:00AM
Credit:	Ralf-Philipp Weinmann of the University of Luxembourg
Vulnerable:	Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 3.2.2 Apple iOS 3.2.1 Apple iOS 4.1 Apple iOS 4 Apple iOS 3.2 Apple iOS 2.1 Apple iOS 2.0
Not Vulnerable:	Apple iOS 4.2

Apple iOS Telephony Baseband Processor Heap Buffer Overflow Vulnerability

Apple iOS is prone to a heap-based buffer-overflow vulnerability in the Telephony component because it fails to perform adequate boundary checks on user-supplied data. This issue affects GSM mobility management.

Attackers may leverage this issue to execute arbitrary code on the baseband processor. Successful attacks will completely compromise an affected device. Failed attacks will cause denial-of-service conditions.

Versions prior to iOS 4.2 are vulnerable.

Apple iOS Telephony Baseband Processor Heap Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apple iOS Telephony Baseband Processor Heap Buffer Overflow Vulnerability

Solution:
The vendor has released an advisory and fixes. Please see the references for details.

Apple iOS Telephony Baseband Processor Heap Buffer Overflow Vulnerability

References:

• Apple Homepage (Apple)
  
• iOS 4 Software Update (Apple)