CVE

Id
39639  
CVE No.
CVE-2009-2204  
Status
Candidate  
Description
Unspecified vulnerability in the CoreTelephony component in Apple iPhone OS before 3.0.1 allows remote attackers to execute arbitrary code, obtain GPS coordinates, or enable the microphone via an SMS message that triggers memory corruption, as demonstrated by Charlie Miller at SyScan "09 Singapore.  
Phase
Assigned (20090624)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
435972 39639 CVE-2009-2204 MISC:http://www.blackhat.com/presentations/bh-usa-09/MILLER/BHUSA09-Miller-FuzzingPhone-PAPER.pdf  View
435973 39639 CVE-2009-2204 MISC:http://news.cnet.com/8301-1009_3-10278472-83.html  View
435974 39639 CVE-2009-2204 MISC:http://www.syscan.org/Sg/program.html  View
435975 39639 CVE-2009-2204 CONFIRM:http://support.apple.com/kb/HT3754  View
435976 39639 CVE-2009-2204 APPLE:APPLE-SA-2009-07-31-1  View
435977 39639 CVE-2009-2204 URL:http://lists.apple.com/archives/security-announce/2009/Jul/msg00001.html  View
435978 39639 CVE-2009-2204 BID:35569  View
435979 39639 CVE-2009-2204 URL:http://www.securityfocus.com/bid/35569  View
435980 39639 CVE-2009-2204 OSVDB:55687  View
435981 39639 CVE-2009-2204 URL:http://www.osvdb.org/55687  View
435982 39639 CVE-2009-2204 SECTRACK:1022626  View
435983 39639 CVE-2009-2204 URL:http://securitytracker.com/id?1022626  View
435984 39639 CVE-2009-2204 SECUNIA:36070  View
435985 39639 CVE-2009-2204 URL:http://secunia.com/advisories/36070  View
435986 39639 CVE-2009-2204 VUPEN:ADV-2009-2105  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
42541 JVNDB-2009-003548 FreeBSD における IPv6 ネットワークインターフェースを変更または無効にされる脆弱性 FreeBSD には、SIOCSIFINFO_IN6 IOCTL 上のパーミッションを実施しないため、IPv6 ネットワークインターフェースを変更または無効にされる脆弱性が存在します。 CVE-2009-2208 39639 3.6 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003548.html  View