CVE-2010-3828: Medium severity iphone os vulnerability
Published Nov 26, 2010
·Updated
iAd Content Display in Apple iOS before 4.2 allows man-in-the-middle attackers to make calls via a crafted URL in an ad.
Affected Software
29 affected components
apple iPhone OS=3.0
apple iPhone OS=3.2
apple iPhone OS=3.1.3
apple iPhone OS=1.0.2
apple iPhone OS=4.0.2
apple iPhone OS=2.2
apple iPhone OS=1.1.1
apple iPhone OS<=4.1
apple iPhone OS=2.0.0
apple iPhone OS=3.1.2
apple iPhone OS=3.0.1
apple iPhone OS=1.1.2
apple iPhone OS=3.1
apple iPhone OS=1.1.3
apple iPhone OS=1.1.0
apple iPhone OS=1.0.1
apple iPhone OS=2.1
apple iPhone OS=1.1.5
apple iPhone OS=4.0.1
apple iPhone OS=2.1.1
apple iPhone OS=1.1.4
apple iPhone OS=1.0.0
apple iPhone OS=2.0.2
apple iPhone OS=2.0
apple iPhone OS=2.0.1
apple iPhone OS=4.0
apple iPhone OS=2.2.1
apple iPhone OS=3.2.1
apple iPhone OS=3.2.2
Remediation
Patch Available
Event History
Nov 26, 2010
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-3828?
CVE-2010-3828 has a moderate severity rating as it allows man-in-the-middle attackers to exploit vulnerable iOS versions.
2
How do I fix CVE-2010-3828?
To fix CVE-2010-3828, users should upgrade to iOS version 4.2 or later where the vulnerability is addressed.
3
What devices are affected by CVE-2010-3828?
CVE-2010-3828 affects various Apple iOS devices running versions from 1.0.0 to 4.1.
4
What type of attack is associated with CVE-2010-3828?
CVE-2010-3828 allows for man-in-the-middle attacks via crafted URLs embedded in ads.
5
Is there a workaround for CVE-2010-3828?
There is no specific workaround for CVE-2010-3828; upgrading to a non-vulnerable iOS version is recommended.