CVE-2010-1810: Low severity iphone os vulnerability
Published Sep 9, 2010
·Updated
FaceTime in Apple iOS before 4.1 on the iPhone and iPod touch does not properly handle invalid X.509 certificates, which allows man-in-the-middle attackers to redirect calls via a crafted certificate.
Affected Software
29 affected components
apple iPhone OS<=4.0.2
apple iPhone OS=1.0.0
apple iPhone OS=1.0.1
apple iPhone OS=1.0.2
apple iPhone OS=1.1.0
apple iPhone OS=1.1.1
apple iPhone OS=1.1.2
apple iPhone OS=1.1.3
apple iPhone OS=1.1.4
apple iPhone OS=1.1.5
apple iPhone OS=2.0
apple iPhone OS=2.0.0
apple iPhone OS=2.0.1
apple iPhone OS=2.0.2
apple iPhone OS=2.1
apple iPhone OS=2.1.1
apple iPhone OS=2.2
apple iPhone OS=2.2.1
apple iPhone OS=3.0
apple iPhone OS=3.0.1
apple iPhone OS=3.1
apple iPhone OS=3.1.2
apple iPhone OS=3.1.3
apple iPhone OS=3.2
apple iPhone OS=3.2.1
apple iPhone OS=4.0
apple iPhone OS=4.0.1
Apple iPod touch
apple iPhone OS
Event History
Sep 9, 2010
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Data Sourced
10:00 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-1810?
CVE-2010-1810 is classified as a medium severity vulnerability due to its potential to enable man-in-the-middle attacks.
2
How do I fix CVE-2010-1810?
To fix CVE-2010-1810, upgrade your Apple iOS to version 4.1 or later.
3
What versions of iOS are affected by CVE-2010-1810?
CVE-2010-1810 affects Apple iOS versions prior to 4.1, including all versions up to 4.0.2.
4
What kind of attack does CVE-2010-1810 allow?
CVE-2010-1810 allows man-in-the-middle attackers to redirect FaceTime calls using invalid X.509 certificates.
5
Which devices are affected by CVE-2010-1810?
CVE-2010-1810 affects the iPhone and iPod touch running vulnerable versions of Apple iOS.