CVE-2010-2973: Integer Overflow
First published: Thu Aug 05 2010(Updated: )
Integer overflow in IOSurface in Apple iOS before 4.0.2 on the iPhone and iPod touch, and before 3.2.2 on the iPad, allows local users to gain privileges via vectors involving IOSurface properties, as demonstrated by JailbreakMe.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| iStyle @cosme iPhone OS | =4.0 | |
| iStyle @cosme iPhone OS | =4.0 | |
| iStyle @cosme iPhone OS | =4.0.1 | |
| iStyle @cosme iPhone OS | =4.0.1 | |
| iStyle @cosme iPhone OS | ||
| Apple iPad | ||
| iStyle @cosme iPhone OS | =4.0 | |
| iStyle @cosme iPhone OS | =4.0.1 | |
| Apple iPod touch |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.exploit-db.com/exploits/14538
- http://www.securityfocus.com/bid/42151
- http://osvdb.org/66827
- http://secunia.com/advisories/40807
- http://support.apple.com/kb/HT4292
- http://lists.apple.com/archives/security-announce/2010//Aug/msg00001.html
- http://lists.apple.com/archives/security-announce/2010//Aug/msg00000.html
- http://support.apple.com/kb/HT4291
Frequently Asked Questions
What is the severity of CVE-2010-2973?
CVE-2010-2973 is considered a moderate severity vulnerability due to its potential to allow local privilege escalation.
How do I fix CVE-2010-2973?
To fix CVE-2010-2973, users should upgrade to Apple iOS 4.0.2 or later on affected devices.
What devices are affected by CVE-2010-2973?
CVE-2010-2973 affects iOS devices including iPhone, iPod touch, and iPad running versions prior to 4.0.2 or 3.2.2 respectively.
What type of vulnerability is CVE-2010-2973?
CVE-2010-2973 is an integer overflow vulnerability that can be exploited for privilege escalation.
Can CVE-2010-2973 be exploited remotely?
CVE-2010-2973 requires local access to the affected device for exploitation.
- collector/nvd-historical
- agent/references
- agent/type
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- agent/weakness
- agent/author
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/description
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/apple
- canonical/istyle @cosme iphone os
- version/istyle @cosme iphone os/4.0
- version/istyle @cosme iphone os/4.0.1
- canonical/apple ipad
- canonical/apple ipod touch