Lucene search
HistorySep 10, 2009 - 9:30 p.m.
CVE-2009-2795
apple
iphone
os
buffer overflow
security vulnerability
cve-2009-2795
nvd
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.5 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
15.6%
Heap-based buffer overflow in the Recovery Mode component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, allows local users to bypass the passcode requirement and access arbitrary data via vectors related to “command parsing.”
Affected configurations
Node
appleiphone_osRange<3.1
ORappleiphone_osRange<3.1.1ipod_touch
| CPE | Name | Operator | Version |
|---|---|---|---|
| apple:iphone_os | apple iphone os | lt | 3.1 |
| apple:iphone_os | apple iphone os | lt | 3.1.1 |
Related
cvelist
cvelist
CVE-2009-2795
2009-09-10 21:00:00
prion
prion
Heap overflow
2009-09-10 21:30:00
nvd
nvd
CVE-2009-2795
2009-09-10 21:30:01
nessus
nessus
Apple iOS 3.x < 3.1 Multiple Vulnerabilities
2009-09-10 00:00:00
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.5 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
15.6%
Related for CVE-2009-2795