CVE-2007-3753: Input Validation

Published Sep 27, 2007

Updated

Apple iPhone 1.1.1, with Bluetooth enabled, allows physically proximate attackers to cause a denial of service (application termination) and execute arbitrary code via crafted Service Discovery Protocol (SDP) packets, related to insufficient input validation.

Affected Software

3 affected components

apple iPhone=1.0

apple iPhone OS=1.0.1

apple iPhone OS=1.0.2

Remediation

Patch Available

http://lists.apple.com/archives/security-announce/2007/Sep/msg00001.html

Event History

Sep 27, 2007

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-3753?

CVE-2007-3753 has been reported as a denial of service vulnerability with potential for arbitrary code execution.

How do I fix CVE-2007-3753?

To mitigate CVE-2007-3753, users should disable Bluetooth when not in use and upgrade to a secure version of the operating system.

Which devices are affected by CVE-2007-3753?

CVE-2007-3753 affects Apple iPhone OS versions 1.0, 1.0.1, and 1.0.2 with Bluetooth enabled.

What type of attacks can exploit CVE-2007-3753?

CVE-2007-3753 can be exploited by physically proximate attackers sending crafted Service Discovery Protocol packets.

What is the impact of CVE-2007-3753 on devices?

The impact of CVE-2007-3753 includes possible application termination and execution of arbitrary code.