vendor:
Apple iPhone Firmware
by:
hdm, kf
7.5
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: Apple iPhone Firmware
Affected Version From: 1
Affected Version To: 1.1.2001
Patch Exists: NO
Related CWE: CVE-2006-3459
CPE: a:apple:iphone_firmware:1.00 cpe:/a:apple:iphone_firmware:1.01 cpe:/a:apple:iphone_firmware:1.02 cpe:/a:apple:iphone_firmware:1.1.1
Metasploit:
https://www.rapid7.com/db/vulnerabilities/linuxrpm-RHSA-2006-0648/, https://www.rapid7.com/db/vulnerabilities/linuxrpm-RHSA-2006-0603/, https://www.rapid7.com/db/vulnerabilities/apple-osx-imageio-cve-2006-3459/, https://www.rapid7.com/db/vulnerabilities/linuxrpm-CESA-2006-0648/, https://www.rapid7.com/db/vulnerabilities/gentoo-linux-cve-2006-3459/, https://www.rapid7.com/db/vulnerabilities/linuxrpm-CESA-2006-0603/, https://www.rapid7.com/db/vulnerabilities/apple-osx-appkitimageio-cve-2006-3459/, https://www.rapid7.com/db/vulnerabilities/suse-cve-2006-3459/
Platforms Tested:
2006
Apple iOS MobileMail LibTIFF Buffer Overflow
This module exploits a buffer overflow in the version of libtiff shipped with firmware versions 1.00, 1.01, 1.02, and 1.1.1 of the Apple iPhone. iPhones which have not had the BSD tools installed will need to use a special payload.
Mitigation:
Unknown
