CVE-2011-0227: High severity iphone os vulnerability
Published Jul 19, 2011
·Updated
The queueing primitives in IOMobileFrameBuffer in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 do not properly perform type conversion, which allows local users to gain privileges via a crafted application.
Affected Software
36 affected components
apple iPhone OS=3.0
apple iPhone OS=3.2
apple iPhone OS=3.1.3
apple iPhone OS=1.0.2
apple iPhone OS=4.0.2
apple iPhone OS=2.2
apple iPhone OS=1.1.1
apple iPhone OS=4.1
apple iPhone OS=2.0.0
apple iPhone OS=3.1.2
apple iPhone OS=3.0.1
apple iPhone OS=4.2.5
apple iPhone OS=1.1.2
apple iPhone OS=3.1
apple iPhone OS=1.1.3
apple iPhone OS=1.1.0
apple iPhone OS=1.0.1
apple iPhone OS=2.1
apple iPhone OS=4.2.1
apple iPhone OS=1.1.5
apple iPhone OS=4.0.1
apple iPhone OS=2.1.1
apple iPhone OS=1.1.4
apple iPhone OS=1.0.0
apple iPhone OS=2.0.2
apple iPhone OS=2.0
apple iPhone OS<=4.2.8
apple iPhone OS=2.0.1
apple iPhone OS=4.0
apple iPhone OS=2.2.1
apple iPhone OS=3.2.1
apple iPhone OS=3.2.2
apple iPhone OS=4.3.2
apple iPhone OS=4.3.1
apple iPhone OS=4.3.3
apple iPhone OS=4.3.0
Event History
Jul 19, 2011
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-0227?
The severity of CVE-2011-0227 is classified as a moderate security risk allowing local privilege escalation.
2
How do I fix CVE-2011-0227?
To fix CVE-2011-0227, users should update their devices to the latest available version of iOS that addresses this vulnerability.
3
Which versions of iOS are affected by CVE-2011-0227?
CVE-2011-0227 affects iOS versions prior to 4.2.9 and 4.3.x before 4.3.4.
4
Can CVE-2011-0227 be exploited remotely?
No, CVE-2011-0227 can only be exploited by local users through a crafted application.
5
What type of vulnerability is CVE-2011-0227?
CVE-2011-0227 is a type conversion vulnerability in the IOMobileFrameBuffer component of iOS.