VulnerabilityModified
CVE-2010-3832
Heap-based buffer overflow in the GSM mobility management implementation in Telephony in Apple iOS before 4.2 on the iPhone and iPad allows remote attackers to execute arbitrary code on the baseband processor via a crafted Temporary Mobile Subscriber…
MEDIUM 6.8EPSS 3.71%
Does this matter?
Lower severity and a low EPSS score (3.71%). Track it; it rarely justifies an emergency change on its own.
Description
Heap-based buffer overflow in the GSM mobility management implementation in Telephony in Apple iOS before 4.2 on the iPhone and iPad allows remote attackers to execute arbitrary code on the baseband processor via a crafted Temporary Mobile Subscriber Identity (TMSI) field.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 3.71% probability · 89th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- apple/iphone os
- Source
- product-security@apple.com
References
- http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.htmlVendor Advisory
- http://secunia.com/advisories/42314
- http://support.apple.com/kb/HT4456Patch, Vendor Advisory
- http://www.securitytracker.com/id?1024770
- http://www.vupen.com/english/advisories/2010/3046
- https://exchange.xforce.ibmcloud.com/vulnerabilities/63421
- http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.htmlVendor Advisory
- http://secunia.com/advisories/42314
- http://support.apple.com/kb/HT4456Patch, Vendor Advisory
- http://www.securitytracker.com/id?1024770
- http://www.vupen.com/english/advisories/2010/3046
- https://exchange.xforce.ibmcloud.com/vulnerabilities/63421
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.