var-201009-0257
Vulnerability from variot
Buffer overflow in ImageIO in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted GIF file. Apple iOS for iPhone and iPod touch is prone to a buffer-overflow vulnerability that affects the 'ImageIO' component. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application, or to crash the affected application. This issue affects iOS 2.0 through 4.0.2 for iPhone 3G and later and iOS 2.1 through 4.0.2 for iPod touch (2nd generation) and later. NOTE: This issue was previously discussed in BID 43070 (Apple iPhone/iPod touch Prior to iOS 4.1 Multiple Vulnerabilities) but has been given its own record to better document it. ImageIO provides ImageReader and ImageWriter plugins for the Graphics Interchange Format (GIF) image format
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-201009-0257", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "iphone os", "scope": "lt", "trust": 1.0, "vendor": "apple", "version": "4.1" }, { "model": "ios", "scope": "eq", "trust": 0.8, "vendor": "apple", "version": "2.0 to 4.0.2 (iphone 3g after )" }, { "model": "ios", "scope": "eq", "trust": 0.8, "vendor": "apple", "version": "2.1 to 4.0.2 (ipod touch (2nd generation) after )" }, { "model": "iphone", "scope": null, "trust": 0.8, "vendor": "apple", "version": null }, { "model": "ipod touch", "scope": null, "trust": 0.8, "vendor": "apple", "version": null }, { "model": "iphone os", "scope": "eq", "trust": 0.6, "vendor": "apple", "version": "2.2" }, { "model": "iphone os", "scope": "eq", "trust": 0.6, "vendor": "apple", "version": "3.0.1" }, { "model": "iphone os", "scope": "eq", "trust": 0.6, "vendor": "apple", "version": "2.0.2" }, { "model": "iphone os", "scope": "eq", "trust": 0.6, "vendor": "apple", "version": "3.0" }, { "model": "iphone os", "scope": "eq", "trust": 0.6, "vendor": "apple", "version": "2.2.1" }, { "model": "iphone os", "scope": "eq", "trust": 0.6, "vendor": "apple", "version": "3.1.3" }, { "model": "iphone os", "scope": "eq", "trust": 0.6, "vendor": "apple", "version": "3.1.2" }, { "model": "iphone os", "scope": "eq", "trust": 0.6, "vendor": "apple", "version": "2.0.0" }, { "model": "ipod touch", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "3.1.3" }, { "model": "ipod touch", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "3.1.2" }, { "model": "ipod touch", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "3.1.1" }, { "model": "ipod touch", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "2.2.1" }, { "model": "ipod touch", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "2.0.2" }, { "model": "ipod touch", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "2.0.1" }, { "model": "ipod touch", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "3.0" }, { "model": "ipod touch", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "2.2" }, { "model": "ipod touch", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "2.1" }, { "model": "ipod touch", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "2.0" }, { "model": "iphone", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "4.0.1" }, { "model": "iphone", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "3.2.1" }, { "model": "iphone", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "3.1.3" }, { "model": "iphone", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "3.1.2" }, { "model": "iphone", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "3.0.1" }, { "model": "iphone", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "2.2.1" }, { "model": "iphone", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "2.0.2" }, { "model": "iphone", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "2.0.1" }, { "model": "iphone iphone", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "4.0.1-" }, { "model": "iphone ipodtouch", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "4.0-" }, { "model": "iphone iphone", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "4.0-" }, { "model": "iphone", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "4.0" }, { "model": "iphone ipad", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "3.2.1-" }, { "model": "iphone ipodtouch", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "3.2-" }, { "model": "iphone iphone", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "3.2-" }, { "model": "iphone", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "3.2" }, { "model": "iphone ipodtouch", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "3.1.3-" }, { "model": "iphone iphone", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "3.1.3-" }, { "model": "iphone ipodtouch", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "3.1.2-" }, { "model": "iphone iphone", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "3.1.2-" }, { "model": "iphone ipodtouch", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "3.1-" }, { "model": "iphone iphone", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "3.1-" }, { "model": "iphone", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "3.1" }, { "model": "iphone ipodtouch", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "3.0.1-" }, { "model": "iphone iphone", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "3.0.1-" }, { "model": "iphone ipodtouch", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "3.0-" }, { "model": "iphone iphone", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "3.0-" }, { "model": "iphone", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "3.0" }, { "model": "iphone ipodtouch", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "2.2.1-" }, { "model": "iphone iphone", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "2.2.1-" }, { "model": "iphone ipodtouch", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "2.2-" }, { "model": "iphone iphone", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "2.2-" }, { "model": "iphone", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "2.2" }, { "model": "iphone ipodtouch", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "2.1-" }, { "model": "iphone iphone", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "2.1-" }, { "model": "iphone", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "2.1" }, { "model": "iphone", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "2.0" }, { "model": "ios", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "4.0.2" }, { "model": "ios", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "4.0.1" }, { "model": "ios", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "3.2.2" }, { "model": "ios", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "3.2.1" }, { "model": "ios", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "4" }, { "model": "ios", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "3.2" }, { "model": "ios", "scope": "eq", "trust": 0.3, "vendor": "apple", "version": "2.0" }, { "model": "ios", "scope": "ne", "trust": 0.3, "vendor": "apple", "version": "4.1" } ], "sources": [ { "db": "BID", "id": "43080" }, { "db": "JVNDB", "id": "JVNDB-2010-002087" }, { "db": "CNNVD", "id": "CNNVD-201009-066" }, { "db": "NVD", "id": "CVE-2010-1817" } ] }, "configurations": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "children": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "data": { "@container": "@list" }, "nodes": { "@container": "@list" } }, "data": [ { "CVE_data_version": "4.0", "nodes": [ { "cpe_match": [ { "cpe22Uri": "cpe:/o:apple:iphone_os", "vulnerable": true }, { "cpe22Uri": "cpe:/h:apple:iphone", "vulnerable": true }, { "cpe22Uri": "cpe:/h:apple:ipod_touch", "vulnerable": true } ], "operator": "OR" } ] } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2010-002087" } ] }, "credits": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Tom Ferris of Adobe PSIRT", "sources": [ { "db": "BID", "id": "43080" } ], "trust": 0.3 }, "cve": "CVE-2010-1817", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "author": "nvd@nist.gov", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "exploitabilityScore": 8.6, "id": "CVE-2010-1817", "impactScore": 6.4, "integrityImpact": "PARTIAL", "severity": "MEDIUM", "trust": 1.0, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0" }, { "acInsufInfo": null, "accessComplexity": "Medium", "accessVector": "Network", "authentication": "None", "author": "NVD", "availabilityImpact": "Complete", "baseScore": 9.3, "confidentialityImpact": "Complete", "exploitabilityScore": null, "id": "CVE-2010-1817", "impactScore": null, "integrityImpact": "Complete", "obtainAllPrivilege": null, "obtainOtherPrivilege": null, "obtainUserPrivilege": null, "severity": "High", "trust": 0.8, "userInteractionRequired": null, "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0" }, { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "author": "VULHUB", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "exploitabilityScore": 8.6, "id": "VHN-44422", "impactScore": 6.4, "integrityImpact": "PARTIAL", "severity": "MEDIUM", "trust": 0.1, "vectorString": "AV:N/AC:M/AU:N/C:P/I:P/A:P", "version": "2.0" } ], "cvssV3": [], "severity": [ { "author": "nvd@nist.gov", "id": "CVE-2010-1817", "trust": 1.0, "value": "MEDIUM" }, { "author": "NVD", "id": "CVE-2010-1817", "trust": 0.8, "value": "High" }, { "author": "CNNVD", "id": "CNNVD-201009-066", "trust": 0.6, "value": "MEDIUM" }, { "author": "VULHUB", "id": "VHN-44422", "trust": 0.1, "value": "MEDIUM" } ] } ], "sources": [ { "db": "VULHUB", "id": "VHN-44422" }, { "db": "JVNDB", "id": "JVNDB-2010-002087" }, { "db": "CNNVD", "id": "CNNVD-201009-066" }, { "db": "NVD", "id": "CVE-2010-1817" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Buffer overflow in ImageIO in Apple iOS before 4.1 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted GIF file. Apple iOS for iPhone and iPod touch is prone to a buffer-overflow vulnerability that affects the \u0027ImageIO\u0027 component. \nAttackers can exploit this issue to execute arbitrary code in the context of the user running the affected application, or to crash the affected application. \nThis issue affects iOS 2.0 through 4.0.2 for iPhone 3G and later and iOS 2.1 through 4.0.2 for iPod touch (2nd generation) and later. \nNOTE: This issue was previously discussed in BID 43070 (Apple iPhone/iPod touch Prior to iOS 4.1 Multiple Vulnerabilities) but has been given its own record to better document it. ImageIO provides ImageReader and ImageWriter plugins for the Graphics Interchange Format (GIF) image format", "sources": [ { "db": "NVD", "id": "CVE-2010-1817" }, { "db": "JVNDB", "id": "JVNDB-2010-002087" }, { "db": "BID", "id": "43080" }, { "db": "VULHUB", "id": "VHN-44422" } ], "trust": 1.98 }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2010-1817", "trust": 2.8 }, { "db": "XF", "id": "61697", "trust": 0.8 }, { "db": "JVNDB", "id": "JVNDB-2010-002087", "trust": 0.8 }, { "db": "CNNVD", "id": "CNNVD-201009-066", "trust": 0.7 }, { "db": "BID", "id": "43080", "trust": 0.4 }, { "db": "VULHUB", "id": "VHN-44422", "trust": 0.1 } ], "sources": [ { "db": "VULHUB", "id": "VHN-44422" }, { "db": "BID", "id": "43080" }, { "db": "JVNDB", "id": "JVNDB-2010-002087" }, { "db": "CNNVD", "id": "CNNVD-201009-066" }, { "db": "NVD", "id": "CVE-2010-1817" } ] }, "id": "VAR-201009-0257", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "VULHUB", "id": "VHN-44422" } ], "trust": 0.01 }, "last_update_date": "2024-11-23T22:14:20.934000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "HT4334", "trust": 0.8, "url": "http://support.apple.com/kb/HT4334" }, { "title": "HT4334", "trust": 0.8, "url": "http://support.apple.com/kb/HT4334?viewlocale=ja_JP" }, { "title": "Apple iOS ImageIO Buffer error vulnerability fix", "trust": 0.6, "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=203166" } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2010-002087" }, { "db": "CNNVD", "id": "CNNVD-201009-066" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "CWE-119", "trust": 1.9 } ], "sources": [ { "db": "VULHUB", "id": "VHN-44422" }, { "db": "JVNDB", "id": "JVNDB-2010-002087" }, { "db": "NVD", "id": "CVE-2010-1817" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 1.7, "url": "http://lists.apple.com/archives/security-announce/2010//sep/msg00002.html" }, { "trust": 1.7, "url": "http://support.apple.com/kb/ht4334" }, { "trust": 1.7, "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/61697" }, { "trust": 0.8, "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-1817" }, { "trust": 0.8, "url": "http://xforce.iss.net/xforce/xfdb/61697" }, { "trust": 0.8, "url": "http://jvn.jp/cert/jvnvu407599" }, { "trust": 0.8, "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2010-1817" }, { "trust": 0.3, "url": "http://www.apple.com/iphone/softwareupdate/" }, { "trust": 0.3, "url": "http://www.apple.com/iphone/" }, { "trust": 0.3, "url": "http://www.apple.com/ipodtouch/" } ], "sources": [ { "db": "VULHUB", "id": "VHN-44422" }, { "db": "BID", "id": "43080" }, { "db": "JVNDB", "id": "JVNDB-2010-002087" }, { "db": "CNNVD", "id": "CNNVD-201009-066" }, { "db": "NVD", "id": "CVE-2010-1817" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "VULHUB", "id": "VHN-44422" }, { "db": "BID", "id": "43080" }, { "db": "JVNDB", "id": "JVNDB-2010-002087" }, { "db": "CNNVD", "id": "CNNVD-201009-066" }, { "db": "NVD", "id": "CVE-2010-1817" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2010-09-09T00:00:00", "db": "VULHUB", "id": "VHN-44422" }, { "date": "2010-09-08T00:00:00", "db": "BID", "id": "43080" }, { "date": "2010-10-04T00:00:00", "db": "JVNDB", "id": "JVNDB-2010-002087" }, { "date": "2010-09-13T00:00:00", "db": "CNNVD", "id": "CNNVD-201009-066" }, { "date": "2010-09-09T22:00:01.920000", "db": "NVD", "id": "CVE-2010-1817" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2018-11-16T00:00:00", "db": "VULHUB", "id": "VHN-44422" }, { "date": "2010-09-08T00:00:00", "db": "BID", "id": "43080" }, { "date": "2010-10-04T00:00:00", "db": "JVNDB", "id": "JVNDB-2010-002087" }, { "date": "2022-08-10T00:00:00", "db": "CNNVD", "id": "CNNVD-201009-066" }, { "date": "2024-11-21T01:15:15.500000", "db": "NVD", "id": "CVE-2010-1817" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "remote", "sources": [ { "db": "CNNVD", "id": "CNNVD-201009-066" } ], "trust": 0.6 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "iPhone and iPod touch Run on Apple iOS of ImageIO Vulnerable to buffer overflow", "sources": [ { "db": "JVNDB", "id": "JVNDB-2010-002087" } ], "trust": 0.8 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "buffer error", "sources": [ { "db": "CNNVD", "id": "CNNVD-201009-066" } ], "trust": 0.6 } }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.