Multiple Apple Products Wi-Fi Frame Bounds Checking Denial of Service Vulnerability

Bugtraq ID:	46813
Class:	Unknown
CVE:	CVE-2011-0162
Remote:	Yes
Local:	No
Published:	Mar 09 2011 12:00AM
Updated:	Mar 19 2015 09:04AM
Credit:	Scott Boyd of ePlus Technology, inc.
Vulnerable:	Apple iPod Touch 0 Apple iPhone 0 Apple iPad 0 Apple iOS 4.2.1 Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 3.2.2 Apple iOS 3.2.1 Apple iOS 4.2 beta Apple iOS 4.2 Apple iOS 4.1 Apple iOS 4 Apple iOS 3.2 Apple iOS 2.1 Apple iOS 2.0 Apple Apple TV 4.1 Apple Apple TV 4.0
Not Vulnerable:	Apple iOS 4.3 Apple Apple TV 4.2

Multiple Apple Products Wi-Fi Frame Bounds Checking Denial of Service Vulnerability

Multiple Apple products are prone to a remote denial-of-service vulnerability when connected to a Wi-Fi network. This issue is related to insufficient bounds-checking on certain Wi-Fi frames.

Attackers on the same network can exploit this issue to cause the affected device to reset, denying service to legitimate users.

This issue is fixed in the following versions:

Apple TV 4.2
Apple iOS 4.3

Multiple Apple Products Wi-Fi Frame Bounds Checking Denial of Service Vulnerability

Attackers can exploit this issue with readily available networking tools.

Multiple Apple Products Wi-Fi Frame Bounds Checking Denial of Service Vulnerability

Solution:
Updates are available; please see the references for more information.

Multiple Apple Products Wi-Fi Frame Bounds Checking Denial of Service Vulnerability

References:

• Apple TV Homepage (Apple)
  
• iOS Homepage (Apple)