Apple iOS Photos Handling Security Bypass Vulnerability
BID:45012
Info
Apple iOS Photos Handling Security Bypass Vulnerability
| Bugtraq ID: | 45012 |
| Class: | Input Validation Error |
| CVE: |
CVE-2010-3831 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 22 2010 12:00AM |
| Updated: | Nov 22 2010 12:00AM |
| Credit: | Aaron Sigel of vtty.com |
| Vulnerable: |
Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 3.2.2 Apple iOS 3.2.1 Apple iOS 4.1 Apple iOS 4 Apple iOS 3.2 Apple iOS 2.1 Apple iOS 2.0 |
| Not Vulnerable: |
Apple iOS 4.2 |
Discussion
Apple iOS Photos Handling Security Bypass Vulnerability
Apple iOS is prone to a security-bypass vulnerability that affects the Photo component.
An attacker can exploit this issue to gain access to a 'MobileMe' account password.
Apple iOS is prone to a security-bypass vulnerability that affects the Photo component.
An attacker can exploit this issue to gain access to a 'MobileMe' account password.
Exploit / POC
Apple iOS Photos Handling Security Bypass Vulnerability
Attackers can exploit this issue by enticing an unsuspecting user into visiting a specially crafted webpage with an affected device's browser.
Attackers can exploit this issue by enticing an unsuspecting user into visiting a specially crafted webpage with an affected device's browser.
Solution / Fix
Apple iOS Photos Handling Security Bypass Vulnerability
Solution:
Updates are available; please see the references for more information.
Solution:
Updates are available; please see the references for more information.
References
Apple iOS Photos Handling Security Bypass Vulnerability
References:
References:
- Apple Homepage (Apple)
- iPhone Homepage (Apple)