NVD

Id
49466  
Name
CVE-2009-2204  
Description
Unspecified vulnerability in the CoreTelephony component in Apple iPhone OS before 3.0.1 allows remote attackers to execute arbitrary code, obtain GPS coordinates, or enable the microphone via an SMS message that triggers memory corruption, as demonstrated by Charlie Miller at SyScan "09 Singapore.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-08-03  
Modified Date
2010-03-30  
Seq
2009-2204  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
250212 49466 CVE-2009-2204 APPLE-SA-2009-07-31-1  View
250213 49466 CVE-2009-2204 http://news.cnet.com/8301-1009_3-10278472-83.html  View
250214 49466 CVE-2009-2204 1022626  View
250215 49466 CVE-2009-2204 http://support.apple.com/kb/HT3754  View
250216 49466 CVE-2009-2204 http://www.blackhat.com/presentations/bh-usa-09/MILLER/BHUSA09-Miller-FuzzingPhone-PAPER.pdf  View
250217 49466 CVE-2009-2204 35569  View
250218 49466 CVE-2009-2204 http://www.syscan.org/Sg/program.html  View
250219 49466 CVE-2009-2204 ADV-2009-2105  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40963 JVNDB-2009-001969 Apple iPhone OS における SMS メッセージの処理に関する任意のコードを実行される脆弱性 Apple iPhone OS の CoreTelephony コンポーネントには、SMS メッセージの処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2009-2204 39635 CVE-2009-2204 49466 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001969.html 2009-07-31 2009-09-04 View