CVEvulnerability
CVE-2010-2973
6.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-08-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Integer overflow in IOSurface in Apple iOS before 4.0.2 on the iPhone and iPod touch, and before 3.2.2 on the iPad, allows local users to gain privileges via vectors involving IOSurface properties, as demonstrated by JailbreakMe.
Affected configurations
• apple iphone os 4.0
• apple iphone os 4.0.1
Related
Weakness · not in database (1)
References
- http://lists.apple.com/archives/security-announce/2010//Aug/msg00000.html lists.apple.com
- http://lists.apple.com/archives/security-announce/2010//Aug/msg00001.html lists.apple.com
- http://osvdb.org/66827 osvdb.org
- http://secunia.com/advisories/40807 Vendor Advisory
- http://support.apple.com/kb/HT4291 support.apple.com
- http://support.apple.com/kb/HT4292 support.apple.com
- http://www.exploit-db.com/exploits/14538 Exploit
- http://www.securityfocus.com/bid/42151 www.securityfocus.com
- http://lists.apple.com/archives/security-announce/2010//Aug/msg00000.html lists.apple.com
- http://lists.apple.com/archives/security-announce/2010//Aug/msg00001.html lists.apple.com
- http://osvdb.org/66827 osvdb.org
- http://secunia.com/advisories/40807 Vendor Advisory
- http://support.apple.com/kb/HT4291 support.apple.com
- http://support.apple.com/kb/HT4292 support.apple.com
- http://www.exploit-db.com/exploits/14538 Exploit
- http://www.securityfocus.com/bid/42151 www.securityfocus.com