CVE-2010-1179 : Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause

Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a large integer in the numcolors attribute of a recolorinfo element in a VML file, possibly a related issue to CVE-2007-0024.

Published 2010-03-29 19:30:01

Updated 2010-03-30 04:00:00

Source MITRE

View at NVD, CVE.org

Vulnerability category: Execute codeDenial of service

Products affected by CVE-2010-1179

Apple » Safari
cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Iphone Os » Version: 3.1.3
When used together with: Apple » Iphone Os » Version: 3.1.3 Ipodtouch Edition

Exploit prediction scoring system (EPSS) score for CVE-2010-1179

EPSS FAQ

1.68%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 88 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2010-1179

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C	8.6	10.0	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2010-1179

CWE-189

Assigned by: nvd@nist.gov (Primary)

References for CVE-2010-1179

http://nishantdaspatnaik.yolasite.com/ipodpoc4.php

Nishant Das Patnaik
Exploit
http://www.securityfocus.com/bid/38990

Apple iPhone Malformed VML Data Remote Code Execution Vulnerability
Exploit
http://www.exploit-db.com/exploits/11890

Apple iOS Safari - Bad 'VML' Remote Denial of Service - iOS dos Exploit
Exploit

Jump to

Vulnerability Details : CVE-2010-1179

Products affected by CVE-2010-1179

Exploit prediction scoring system (EPSS) score for CVE-2010-1179

CVSS scores for CVE-2010-1179

CWE ids for CVE-2010-1179

References for CVE-2010-1179