Apple iPhone 3.1之前版本SMS消息NULL指针引用漏洞

Bugraq ID: 36336 CVE ID：CVE-2009-2815 iPhone是一款苹果公司发布的智能手机。 iPhone处理到知通告的SMS消息存在NULL指针应用错误，发送特殊构建的SMS消息可导致服务中断，造成拒绝服务攻击。 Apple iPhone 3.0.1 Apple iPhone 2.2.1 Apple iPhone 2.0.2 Apple iPhone 2.0.1 Apple iPhone 1.1.4 Apple iPhone 1.1.3 Apple iPhone 1.1.2 Apple iPhone 1.1.1 Apple iPhone 1.0.2 Apple...

CVE-2009-2815

The Telephony component in Apple iPhone OS before 3.1 does not properly handle SMS arrival notifications, which allows remote attackers to cause a denial of service NULL pointer dereference and service interruption via a crafted SMS message...

Null pointer dereference

The Telephony component in Apple iPhone OS before 3.1 does not properly handle SMS arrival notifications, which allows remote attackers to cause a denial of service NULL pointer dereference and service interruption via a crafted SMS message...

CVE-2009-2815

The Telephony component in Apple iPhone OS before 3.1 does not properly handle SMS arrival notifications, which allows remote attackers to cause a denial of service NULL pointer dereference and service interruption via a crafted SMS message...

CVE-2009-2815: Undefined Security Weakness

The Telephony component in Apple iPhone OS before 3.1 does not properly handle SMS arrival notifications, which allows remote attackers to cause a denial of service NULL pointer dereference and service interruption via a crafted SMS message...

Apple iPhone短信消息远程内存破坏漏洞

BUGTRAQ ID: 35569 CVECAN ID: CVE-2009-2204,CVE-2009-2315 Apple iPhone是苹果最新发布的智能手机。 iPhone手机在解码短信消息时存在内存破坏漏洞，远程攻击者可以通过发送恶意短信导致执行任何代码、获取GPS坐标或启用话筒。 Apple iPhone 3.0 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.apple.com...

Memory corruption

Unspecified vulnerability in the CoreTelephony component in Apple iPhone OS before 3.0.1 allows remote attackers to execute arbitrary code, obtain GPS coordinates, or enable the microphone via an SMS message that triggers memory corruption, as demonstrated by Charlie Miller at SyScan '09 Singapor...

CVE-2009-2204

Unspecified vulnerability in the CoreTelephony component in Apple iPhone OS before 3.0.1 allows remote attackers to execute arbitrary code, obtain GPS coordinates, or enable the microphone via an SMS message that triggers memory corruption, as demonstrated by Charlie Miller at SyScan '09 Singapor...

CVE-2009-2656

Unspecified vulnerability in the com.android.phone process in Android 1.0, 1.1, and 1.5 allows remote attackers to cause a denial of service network disconnection via a crafted SMS message, as demonstrated by Collin Mulliner and Charlie Miller at Black Hat USA 2009...

CVE-2009-2204

Unspecified vulnerability in the CoreTelephony component in Apple iPhone OS before 3.0.1 allows remote attackers to execute arbitrary code, obtain GPS coordinates, or enable the microphone via an SMS message that triggers memory corruption, as demonstrated by Charlie Miller at SyScan '09 Singapor...

CVE-2009-2656

Unspecified vulnerability in the com.android.phone process in Android 1.0, 1.1, and 1.5 allows remote attackers to cause a denial of service network disconnection via a crafted SMS message, as demonstrated by Collin Mulliner and Charlie Miller at Black Hat USA 2009...

CVE-2009-2656

The CVE-2009-2656 entry concerns an unspecified vulnerability in the com.android.phone process on Android 1.0/1.1/1.5 that allows remote attackers to cause a denial of service (network disconnection) by sending a crafted SMS. The issue was demonstrated by Collin Mulliner and Charlie Miller at Bla...

CVE-2009-2204

CVE-2009-2204 affects Apple iPhone OS prior to 3.0.1 in the CoreTelephony component. A memory-corruption flaw triggered by an SMS can enable remote code execution and expose GPS coordinates or enable the microphone, as demonstrated by Charlie Miller at SyScan ’09. A patch addressing this issue wa...

CVE-2009-2204: Undefined Security Weakness

Unspecified vulnerability in the CoreTelephony component in Apple iPhone OS before 3.0.1 allows remote attackers to execute arbitrary code, obtain GPS coordinates, or enable the microphone via an SMS message that triggers memory corruption, as demonstrated by Charlie Miller at SyScan '09 Singapor...

CVE-2009-2656: Undefined Security Weakness

Unspecified vulnerability in the com.android.phone process in Android 1.0, 1.1, and 1.5 allows remote attackers to cause a denial of service network disconnection via a crafted SMS message, as demonstrated by Collin Mulliner and Charlie Miller at Black Hat USA 2009...

HTC Touch 3G Windows Mobile/Open Handset Alliance Android SMS远程拒绝服务漏洞

HTC Touch 3G Windows Mobile是一款使用Windows Mobile操作系统的智能手机。Open Handset Alliance Android是一款超过30家科技与移动电话公司所组成的团体开发的免费的移动电话平台。 HTC Touch 3G Windows Mobile/Open Handset Alliance Android不正确处理特殊构建的SMS消息，远程攻击者可以利用漏洞关闭设备的用户接口，使设备从网络中断开，导致拒绝服务攻击。 Microsoft Windows Mobile Professional 6.1 Microsoft Windows...

Researchers Reveal Fundamental SMS Flaws at Black Hat

There are several architectural and implementation problems in mobile phone networks that can be used to force users to open malicious files, allow attackers to gain control of users’ phones and change phone settings to redirect mobile Internet traffic to a proxy controlled by the attackers. In a...

New Mobile Malware Transmitter.C Spreading

From Zero Day Dancho Danchev Researchers from NetQin Tech. are reporting on a newly discovered mobile malware variant Transmitter.C distributed through a modified version of legitimate mobile application. Upon execution, the malware attempts to automatically spread by SMS-ing hundreds of messages...

Apple iPhone memory corruption

Memory corruption on SMS messages parsing...

Apple Working to Fix Serious iPhone SMS Flaw

From IDG News Service Sumner Lemon Apple is working to fix an iPhone vulnerability that could allow an attacker to remotely install and run unsigned software code with root access to the phone. The attack in question exploits a weakness in the way iPhones handle text messages received via SMS Sho...