CVEvulnerability
CVE-2010-0038
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-02-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-399
Description
Recovery Mode in Apple iPhone OS 1.0 through 3.1.2, and iPhone OS for iPod touch 1.1 through 3.1.2, allows physically proximate attackers to bypass device locking, and read or modify arbitrary data, via a USB control message that triggers memory corruption.
Affected configurations
• apple iphone os 1.0
• apple iphone os 1.0.0
• apple iphone os 1.0.1
• apple iphone os 1.0.2
• apple iphone os 1.1
• apple iphone os 1.1.0
• apple iphone os 1.1.1
• apple iphone os 1.1.2
• apple iphone os 1.1.3
• apple iphone os 1.1.4
• apple iphone os 1.1.5
• apple iphone os 2.0
• apple iphone os 2.0.0
• apple iphone os 2.0.1
• apple iphone os 2.0.2
• apple iphone os 2.1
• apple iphone os 2.1.1
• apple iphone os 2.2
• apple iphone os 2.2.1
• apple iphone os 3.0
• apple iphone os 3.0.1
• apple iphone os 3.1.2
Related
Weakness · not in database (1)
References
- http://lists.apple.com/archives/security-announce/2010/Feb/msg00000.html Vendor Advisory
- http://osvdb.org/62128 osvdb.org
- http://support.apple.com/kb/HT4013 Vendor Advisory
- http://www.securityfocus.com/bid/38040 www.securityfocus.com
- http://lists.apple.com/archives/security-announce/2010/Feb/msg00000.html Vendor Advisory
- http://osvdb.org/62128 osvdb.org
- http://support.apple.com/kb/HT4013 Vendor Advisory
- http://www.securityfocus.com/bid/38040 www.securityfocus.com