CVE-2010-1809

Опубликовано: 09 сент. 2010

Источник: nvd

CVSS2: 10

EPSS Низкий

Описание

The Accessibility component in Apple iOS before 4.1 on the iPhone and iPod touch does not perform the expected VoiceOver announcement associated with the location services icon, which has unspecified impact and attack vectors.

Ссылки

http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html
Mailing List
Vendor Advisory
http://support.apple.com/kb/HT4334
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/61694
Third Party Advisory
VDB Entry
http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html
Mailing List
Vendor Advisory
http://support.apple.com/kb/HT4334
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/61694
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 4.1 (исключая)

Одно из

cpe:2.3:h:apple:ipod_touch:-:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*

EPSS

Процентиль: 74%

0.00857

Низкий

10 Critical

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-j9xm-m3wm-vwfc

github

больше 3 лет назад