CVE-2007-3753

EPSS 1.3%
Veröffentlicht 27.09.2007 21:17:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Apple iPhone 1.1.1, with Bluetooth enabled, allows physically proximate attackers to cause a denial of service (application termination) and execute arbitrary code via crafted Service Discovery Protocol (SDP) packets, related to insufficient input validation.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 11

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ Iphone Version1.0

Apple ≫ iPhone OS Version1.0.1

Apple ≫ iPhone OS Version1.0.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.3%	0.779

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://docs.info.apple.com/article.html?artnum=306586

http://lists.apple.com/archives/security-announce/2007/Sep/msg00001.html

Patch

http://osvdb.org/38538

http://secunia.com/advisories/26983

http://securitytracker.com/id?1018752

http://www.securityfocus.com/bid/25855

http://www.vupen.com/english/advisories/2007/3287

https://exchange.xforce.ibmcloud.com/vulnerabilities/36844

https://nvd.nist.gov/vuln/detail/CVE-2007-3753

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-3753

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-3753

EUVD