CVE-2009-2204

2009-08-0318:00:00

mitre

www.cve.org

6.9 Medium

AI Score

Confidence

Low

0.21 Low

EPSS

Percentile

96.4%

JSON

Unspecified vulnerability in the CoreTelephony component in Apple iPhone OS before 3.0.1 allows remote attackers to execute arbitrary code, obtain GPS coordinates, or enable the microphone via an SMS message that triggers memory corruption, as demonstrated by Charlie Miller at SyScan '09 Singapore.

References

lists.apple.com/archives/security-announce/2009/Jul/msg00001.html

news.cnet.com/8301-1009_3-10278472-83.html

secunia.com/advisories/36070

securitytracker.com/id?1022626

support.apple.com/kb/HT3754

www.blackhat.com/presentations/bh-usa-09/MILLER/BHUSA09-Miller-FuzzingPhone-PAPER.pdf

www.osvdb.org/55687

www.securityfocus.com/bid/35569

www.syscan.org/Sg/program.html

www.vupen.com/english/advisories/2009/2105