CVEvulnerability
CVE-2009-2795
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-09-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Heap-based buffer overflow in the Recovery Mode component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, allows local users to bypass the passcode requirement and access arbitrary data via vectors related to "command parsing."
Affected configurations
• apple iphone os (< 3.1)
• apple iphone os (< 3.1.1)
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html Mailing List, Patch, Vendor Advisory
- http://secunia.com/advisories/36677 Vendor Advisory
- http://support.apple.com/kb/HT3860 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/36341 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53183 VDB Entry
- http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html Mailing List, Patch, Vendor Advisory
- http://secunia.com/advisories/36677 Vendor Advisory
- http://support.apple.com/kb/HT3860 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/36341 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53183 VDB Entry