medium6.8
CVE-2010-3832
Heap-based buffer overflow in the GSM mobility management implementation in Telephony in Apple iOS before 4.2 on the iPhone and iPad allows remote attackers to…
Impact
Heap-based buffer overflow in the GSM mobility management implementation in Telephony in Apple iOS before 4.2 on the iPhone and iPad allows remote attackers to execute arbitrary code on the baseband processor via a crafted Temporary Mobile Subscriber Identity (TMSI) field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Iphone Os | through 4.1 Versions 1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html
- http://secunia.com/advisories/42314
- http://support.apple.com/kb/HT4456
- http://www.securitytracker.com/id?1024770
- http://www.vupen.com/english/advisories/2010/3046
- https://exchange.xforce.ibmcloud.com/vulnerabilities/63421
- http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html
- http://secunia.com/advisories/42314
- http://support.apple.com/kb/HT4456
- http://www.securitytracker.com/id?1024770
- http://www.vupen.com/english/advisories/2010/3046
- https://exchange.xforce.ibmcloud.com/vulnerabilities/63421