Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2010-1809

The Accessibility component in Apple iOS before 4.1 on the iPhone and iPod touch does not perform the expected VoiceOver announcement associated with the location services icon, which has unspecified impact and attack vectors.

Published

2010-09-09T22:00:01.517

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 10.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

10.0

Impact Score

10.0

Weaknesses

Type: Primary
NVD-CWE-noinfo

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	apple	iphone_os	< 4.1	Yes
Hardware	apple	ipod_touch	-	No
Operating System	apple	iphone_os	-	No

References

http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html Mailing List, Vendor Advisory ([email protected])
http://support.apple.com/kb/HT4334 Vendor Advisory ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/61694 Third Party Advisory, VDB Entry ([email protected])
http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html Mailing List, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://support.apple.com/kb/HT4334 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/61694 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)