CVE-2007-3753

EPSS 1.34%
Veröffentlicht 27.09.2007 21:17:00
Zuletzt bearbeitet 23.04.2026 00:35:47
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Apple iPhone 1.1.1, with Bluetooth enabled, allows physically proximate attackers to cause a denial of service (application termination) and execute arbitrary code via crafted Service Discovery Protocol (SDP) packets, related to insufficient input validation.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 11

NVD 3 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ Iphone Version1.0

Apple ≫ iPhone OS Version1.0.1

Apple ≫ iPhone OS Version1.0.2

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.34%	0.802

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://docs.info.apple.com/article.html?artnum=306586

http://lists.apple.com/archives/security-announce/2007/Sep/msg00001.html

Patch

http://osvdb.org/38538

http://secunia.com/advisories/26983

http://securitytracker.com/id?1018752

http://www.securityfocus.com/bid/25855

http://www.vupen.com/english/advisories/2007/3287

https://exchange.xforce.ibmcloud.com/vulnerabilities/36844

https://nvd.nist.gov/vuln/detail/CVE-2007-3753

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-3753

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-3753

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2007-3753