Lucene search

[email protected]CVE-2009-2206

HistorySep 10, 2009 - 9:30 p.m.

CVE-2009-2206

2009-09-1021:30:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2009-2206

buffer overflow

audiocodecs library

coreaudio component

apple iphone os

remote code execution

denial of service

aac

mp3

nvd

7.9 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.035 Low

EPSS

Percentile

91.5%

JSON

Multiple heap-based buffer overflows in the AudioCodecs library in the CoreAudio component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted (1) AAC or (2) MP3 file, as demonstrated by a ringtone with malformed entries in the sample size table.

CPENameOperatorVersion
apple:iphone_osapple iphone osle3.0.1
apple:iphone_osapple iphone oseq1.0.0
apple:iphone_osapple iphone oseq1.0.1
apple:iphone_osapple iphone oseq1.0.2
apple:iphone_osapple iphone oseq1.1.0
apple:iphone_osapple iphone oseq1.1.1
apple:iphone_osapple iphone oseq1.1.2
apple:iphone_osapple iphone oseq1.1.3
apple:iphone_osapple iphone oseq1.1.4
apple:iphone_osapple iphone oseq1.1.5

CPE	Name	Operator	Version
apple:iphone_os	apple iphone os	le	3.0.1
apple:iphone_os	apple iphone os	eq	1.0.0
apple:iphone_os	apple iphone os	eq	1.0.1
apple:iphone_os	apple iphone os	eq	1.0.2
apple:iphone_os	apple iphone os	eq	1.1.0
apple:iphone_os	apple iphone os	eq	1.1.1
apple:iphone_os	apple iphone os	eq	1.1.2
apple:iphone_os	apple iphone os	eq	1.1.3
apple:iphone_os	apple iphone os	eq	1.1.4
apple:iphone_os	apple iphone os	eq	1.1.5

Rows per page:

1-10 of 221

References

lists.apple.com/archives/security-announce/2009/Sep/msg00001.html

secunia.com/advisories/36677

support.apple.com/kb/HT3860

www.securityfocus.com/archive/1/506464/100/0/threaded

www.securityfocus.com/bid/36338

www.securitytracker.com/id?1022869

www.trapkit.de/advisories/TKADV2009-007.txt

exchange.xforce.ibmcloud.com/vulnerabilities/53180

7.9 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.035 Low

EPSS

Percentile

91.5%

JSON

Related for CVE-2009-2206

securityvulns2 prion1 nessus1