10

CVE-2009-2204

Exploit
Unspecified vulnerability in the CoreTelephony component in Apple iPhone OS before 3.0.1 allows remote attackers to execute arbitrary code, obtain GPS coordinates, or enable the microphone via an SMS message that triggers memory corruption, as demonstrated by Charlie Miller at SyScan '09 Singapore.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ iPhone OS Version <= 3.0
Apple ≫ iPhone OS Version1.0
Apple ≫ iPhone OS Version1.0.0
Apple ≫ iPhone OS Version1.0.1
Apple ≫ iPhone OS Version1.0.2
Apple ≫ iPhone OS Version1.1
Apple ≫ iPhone OS Version1.1.0
Apple ≫ iPhone OS Version1.1.1
Apple ≫ iPhone OS Version1.1.2
Apple ≫ iPhone OS Version1.1.3
Apple ≫ iPhone OS Version1.1.4
Apple ≫ iPhone OS Version1.1.5
Apple ≫ iPhone OS Version2.0
Apple ≫ iPhone OS Version2.0.0
Apple ≫ iPhone OS Version2.0.1
Apple ≫ iPhone OS Version2.0.2
Apple ≫ iPhone OS Version2.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 8.47% 0.943
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.apple.com/archives/security-announce/2009/Jul/msg00001.html
http://news.cnet.com/8301-1009_3-10278472-83.html
http://secunia.com/advisories/36070
Vendor Advisory
http://securitytracker.com/id?1022626
Patch
http://support.apple.com/kb/HT3754
Vendor Advisory
http://www.blackhat.com/presentations/bh-usa-09/MILLER/BHUSA09-Miller-FuzzingPhone-PAPER.pdf
Exploit
http://www.osvdb.org/55687
http://www.securityfocus.com/bid/35569
http://www.syscan.org/Sg/program.html
http://www.vupen.com/english/advisories/2009/2105
Patch
Vendor Advisory