RETIRED: Apple iPhone/iPad/iPod touch Prior to iOS 5 Multiple Vulnerabilities
BID:50086
Info
RETIRED: Apple iPhone/iPad/iPod touch Prior to iOS 5 Multiple Vulnerabilities
| Bugtraq ID: | 50086 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Oct 12 2011 12:00AM |
| Updated: | Mar 19 2015 08:35AM |
| Credit: | Leszek Tasiemski of nSense, Rick Deacon, Peter Quade of qdevelop, Erling Ellingsen of Facebook, Apple, Bob Sielken of IBM, Abe White of Hedonic Software Inc, Paul Mousdicas, Tobias Klein working with Verisign iDefense Labs, anonymous, Simon Young of Anglia |
| Vulnerable: |
Apple iPod Touch 3.1.3 Apple iPod Touch 3.1.2 Apple iPod Touch 3.1.1 Apple iPod Touch 3.0 Apple iPod Touch 0 Apple iPhone 4.0.1 Apple iPhone 3.2.1 Apple iPhone 3.1.3 Apple iPhone 3.1.2 Apple iPhone 3.0.1 Apple iPhone 4.3.3 Apple iPhone 4.3.2 Apple iPhone 4.3.1 Apple iPhone 4.3.0 Apple iPhone 4.2.8 Apple iPhone 4.2.5 Apple iPhone 4.2.1 Apple iPhone 4.1 Apple iPhone 4.0.2 Apple iPhone 4.0.1 - Ipodtouch Apple iPhone 4.0.1 - Iphone Apple iPhone 4.0 - Ipodtouch Apple iPhone 4.0 - Iphone Apple iPhone 4.0 Apple iPhone 3.2.2 Apple iPhone 3.2.1 - Ipad Apple iPhone 3.2 - Ipodtouch Apple iPhone 3.2 - Iphone Apple iPhone 3.2 Apple iPhone 3.1.3 - Ipodtouch Apple iPhone 3.1.3 - Iphone Apple iPhone 3.1.2 - Ipodtouch Apple iPhone 3.1.2 - Iphone Apple iPhone 3.1 - Ipodtouch Apple iPhone 3.1 - Iphone Apple iPhone 3.1 Apple iPhone 3.0.1 - Ipodtouch Apple iPhone 3.0.1 - Iphone Apple iPhone 3.0 - Ipodtouch Apple iPhone 3.0 - Iphone Apple iPhone 0 Apple iPad 3.2.1 Apple iPad 3.2.2 Apple iPad 3.2 Apple iPad 0 Apple iOS 4.2.1 Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 3.2.2 Apple iOS 3.2.1 Apple iOS 4.3.5 Apple iOS 4.3.4 Apple iOS 4.3.3 Apple iOS 4.3.2 Apple iOS 4.3.1 Apple iOS 4.3 Apple iOS 4.2.9 Apple iOS 4.2.8 Apple iOS 4.2.7 Apple iOS 4.2.6 Apple iOS 4.2.5 Apple iOS 4.2.10 Apple iOS 4.2 beta Apple iOS 4.2 Apple iOS 4.1 Apple iOS 4 Apple iOS 3.2 Apple iOS 3.1 Apple iOS 3.0 Apple iOS 2.1 Apple iOS 2.0 |
| Not Vulnerable: |
Apple iOS 5 |
Discussion
RETIRED: Apple iPhone/iPad/iPod touch Prior to iOS 5 Multiple Vulnerabilities
Apple iOS for iPhone, iPod touch, and iPad is prone to multiple security vulnerabilities. These issues affect the following components:
CalDAV
Calendar
CFNetwork
CoreGraphics
Data Access
Home screen
Keyboards
OfficeImport
Safari
Settings
UIKit Alerts
WiFi
Successfully exploiting these issues may allow attackers to crash the affected device, bypass security restrictions, obtain sensitive information, or execute arbitrary code. Other attacks are also possible.
This BID is being retired. The following individual records are available to better document the issues:
50115 Apple iOS and Mac OS X CFNetwork Cross Domain Information Disclosure Vulnerability
50123 Apple iPhone/iPad/iPod touch Prior to iOS 5 CVE-2011-3260 Buffer Overflow Vulnerability
50124 Apple iPhone/iPad/iPod touch 'Content-Disposition' Header Cross-Site Scripting Vulnerability
50143 Apple iOS CFNetwork Information Disclosure Vulnerability
50147 Apple iOS Home Screen Information Disclosure Vulnerability
50149 Apple iOS Calendar Synchronization SSL Certificate Validation Information Disclosure Vulnerability
50151 Apple iOS Keyboard Information Disclosure Vulnerability
50152 Apple iOS Parental Restrictions Passcode Information Disclosure Vulnerability
50154 Apple iOS WiFi Credentials Information Disclosure Vulnerability
50155 Apple iOS Free Type Font Document Multiple Memory Corruption Vulnerabilities
50156 Apple iOS Mail Cookie Synchronization Validation Information Disclosure Vulnerability
50157 Apple iPhone/iPad/iPod touch Prior to iOS 5 CVE-2011-3261 Remote Code Execution Vulnerability
50158 Apple iOS (CVE-2011-3432) Remote Denial of Service Vulnerability
50159 Apple iOS Insecure Misleading UI Insecure Configuration Weakness
50161 Apple iOS Calendar Cross Site Scripting Vulnerability
Apple iOS for iPhone, iPod touch, and iPad is prone to multiple security vulnerabilities. These issues affect the following components:
CalDAV
Calendar
CFNetwork
CoreGraphics
Data Access
Home screen
Keyboards
OfficeImport
Safari
Settings
UIKit Alerts
WiFi
Successfully exploiting these issues may allow attackers to crash the affected device, bypass security restrictions, obtain sensitive information, or execute arbitrary code. Other attacks are also possible.
This BID is being retired. The following individual records are available to better document the issues:
50115 Apple iOS and Mac OS X CFNetwork Cross Domain Information Disclosure Vulnerability
50123 Apple iPhone/iPad/iPod touch Prior to iOS 5 CVE-2011-3260 Buffer Overflow Vulnerability
50124 Apple iPhone/iPad/iPod touch 'Content-Disposition' Header Cross-Site Scripting Vulnerability
50143 Apple iOS CFNetwork Information Disclosure Vulnerability
50147 Apple iOS Home Screen Information Disclosure Vulnerability
50149 Apple iOS Calendar Synchronization SSL Certificate Validation Information Disclosure Vulnerability
50151 Apple iOS Keyboard Information Disclosure Vulnerability
50152 Apple iOS Parental Restrictions Passcode Information Disclosure Vulnerability
50154 Apple iOS WiFi Credentials Information Disclosure Vulnerability
50155 Apple iOS Free Type Font Document Multiple Memory Corruption Vulnerabilities
50156 Apple iOS Mail Cookie Synchronization Validation Information Disclosure Vulnerability
50157 Apple iPhone/iPad/iPod touch Prior to iOS 5 CVE-2011-3261 Remote Code Execution Vulnerability
50158 Apple iOS (CVE-2011-3432) Remote Denial of Service Vulnerability
50159 Apple iOS Insecure Misleading UI Insecure Configuration Weakness
50161 Apple iOS Calendar Cross Site Scripting Vulnerability
References
RETIRED: Apple iPhone/iPad/iPod touch Prior to iOS 5 Multiple Vulnerabilities
References:
References:
- iOS Homepage (Apple)
- iPad Homepage (Apple)
- iPhone Product Page (Apple)
- iPod touch Product Page (Apple)