CVE-2010-3827: Input Validation
Published Nov 26, 2010
·Updated
Apple iOS before 4.2 does not properly validate signatures before displaying a configuration profile in the configuration installation utility, which allows remote attackers to spoof profiles via unspecified vectors.
Affected Software
29 affected components
apple iPhone OS=3.0
apple iPhone OS=3.2
apple iPhone OS=3.1.3
apple iPhone OS=1.0.2
apple iPhone OS=4.0.2
apple iPhone OS=2.2
apple iPhone OS=1.1.1
apple iPhone OS<=4.1
apple iPhone OS=2.0.0
apple iPhone OS=3.1.2
apple iPhone OS=3.0.1
apple iPhone OS=1.1.2
apple iPhone OS=3.1
apple iPhone OS=1.1.3
apple iPhone OS=1.1.0
apple iPhone OS=1.0.1
apple iPhone OS=2.1
apple iPhone OS=1.1.5
apple iPhone OS=4.0.1
apple iPhone OS=2.1.1
apple iPhone OS=1.1.4
apple iPhone OS=1.0.0
apple iPhone OS=2.0.2
apple iPhone OS=2.0
apple iPhone OS=2.0.1
apple iPhone OS=4.0
apple iPhone OS=2.2.1
apple iPhone OS=3.2.1
apple iPhone OS=3.2.2
Remediation
Patch Available
Event History
Nov 26, 2010
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-3827?
CVE-2010-3827 is classified as a medium severity vulnerability due to its potential for profile spoofing.
2
How do I fix CVE-2010-3827?
To remedy CVE-2010-3827, users are advised to upgrade to Apple iOS 4.2 or later versions.
3
What types of devices are affected by CVE-2010-3827?
CVE-2010-3827 affects various Apple iOS devices running versions prior to 4.2.
4
What are the risks associated with CVE-2010-3827?
CVE-2010-3827 poses risks of remote attackers being able to spoof configuration profiles on vulnerable devices.
5
When was CVE-2010-3827 published?
CVE-2010-3827 was published on November 10, 2010.