CVE-2010-2973: Integer Overflow
Published Aug 5, 2010
·Updated
Integer overflow in IOSurface in Apple iOS before 4.0.2 on the iPhone and iPod touch, and before 3.2.2 on the iPad, allows local users to gain privileges via vectors involving IOSurface properties, as demonstrated by JailbreakMe.
Affected Software
9 affected components
apple iPhone OS=4.0
apple iPhone OS=4.0
apple iPhone OS=4.0.1
apple iPhone OS=4.0.1
apple iPhone OS
Apple iPad
apple iPhone OS=4.0
apple iPhone OS=4.0.1
Apple iPod touch
Event History
Aug 5, 2010
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
06:17 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-2973?
CVE-2010-2973 is considered a moderate severity vulnerability due to its potential to allow local privilege escalation.
2
How do I fix CVE-2010-2973?
To fix CVE-2010-2973, users should upgrade to Apple iOS 4.0.2 or later on affected devices.
3
What devices are affected by CVE-2010-2973?
CVE-2010-2973 affects iOS devices including iPhone, iPod touch, and iPad running versions prior to 4.0.2 or 3.2.2 respectively.
4
What type of vulnerability is CVE-2010-2973?
CVE-2010-2973 is an integer overflow vulnerability that can be exploited for privilege escalation.
5
Can CVE-2010-2973 be exploited remotely?
CVE-2010-2973 requires local access to the affected device for exploitation.