CVE-2010-3832

Heap-based buffer overflow in the GSM mobility management implementation in Telephony in Apple iOS before 4.2 on the iPhone and iPad allows remote attackers to execute arbitrary code on the baseband processor via a crafted Temporary Mobile Subscriber Identity (TMSI) field.

Score

CVSS 2.0 6.8 Medium

Status

Modified - product-security@apple.com

Published

2010-11-26

Last modified

2024-08-07

Weaknesses

CWE-119

Affected products

• Iphone Os (Apple)

References

• http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html
• http://secunia.com/advisories/42314
• http://support.apple.com/kb/HT4456
• http://www.securitytracker.com/id?1024770
• http://www.vupen.com/english/advisories/2010/3046
• https://exchange.xforce.ibmcloud.com/vulnerabilities/63421