• Non sono ammesse registrazioni con indirizzi email temporanei usa e getta

Apple iPod touch / iPhone TIFF Image Processing Vulnerability

ERCOLINO

Membro dello Staff
Amministratore
Registrato
3 Marzo 2003
Messaggi
243.358
Località
Torino
Secunia Advisory: SA27213
Release Date: 2007-10-12

Critical: Highly critical
Impact: DoS
System access
Where: From remote
Solution Status: Unpatched

OS: Apple iPhone 1.x
Apple iPod touch 1.x


This advisory is currently marked as unpatched!
- Companies can be alerted when a patch is released!


Description:
A vulnerability has been reported in Apple iPod touch and Apple iPhone, which potentially can be exploited by malicious people to compromise a vulnerable device.

The vulnerability is caused due to an error in the processing of TIFF images and can potentially be exploited to execute arbitrary code when a specially crafted TIFF image is viewed, e.g. in the Safari web browser.

The vulnerability is reported in iPod touch version 1.1.1 and iPhone version 1.1.1. Other versions may also be affected.

This may be related to:
SA21304

Solution:
Do not browse untrusted web sites and do not open untrusted TIFF images.
 
Indietro
Alto Basso