what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

iPhone / iTouch Code Execution

Posted Jul 23, 2009

Authored by Thierry Zoller

Calling the CSS attr() attribute with a large number leads to memory corruption, heap spraying allows execution of code. Arbitrary remote code execution can be achieved by creating a special website and enticing the victim into visiting that site. iPhone OS versions 1.x through 2.2.1 and iPhone OS for iPod Touch versions 1.x through 2.2.1 are affected.

tags | advisory, remote, arbitrary, code execution

systems | apple, iphone

advisories | CVE-2009-1698

SHA-256 | 133f492014f2bfbfa80c0caa0d28b13729b130a662880909a1e4dec7f7c492d9

Download | Favorite | View

Related Files

No related files