CVE-2009-0959 The MPEG-4 video codec in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to cause a denial of service (device reset) via a crafted MPEG-4 vide...
HighCVSS 7.1
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The MPEG-4 video codec in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to cause a denial of service (device reset) via a crafted MPEG-4 video file that triggers an "input validation issue."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple iphone os | = 1.0.0 | No fix listed |
| apple iphone os | = 1.0.1 | No fix listed |
| apple iphone os | = 1.0.2 | No fix listed |
| apple iphone os | = 1.1.0 | No fix listed |
| apple iphone os | = 1.1.1 | No fix listed |
| apple iphone os | = 1.1.2 | No fix listed |
| apple iphone os | = 1.1.3 | No fix listed |
| apple iphone os | = 1.1.4 | No fix listed |
| apple iphone os | = 1.1.5 | No fix listed |
| apple iphone os | = 2.0 | No fix listed |
| apple iphone os | = 2.0.0 | No fix listed |
| apple iphone os | = 2.0.1 | No fix listed |
| apple iphone os | = 2.0.2 | No fix listed |
| apple iphone os | = 2.1 | No fix listed |
| apple iphone os | = 2.1.1 | No fix listed |
| apple iphone os | = 2.2 | No fix listed |
| apple iphone os | = 2.2.1 | No fix listed |
| apple iphone os | All versions | No fix listed |
| apple ipod touch | All versions | No fix listed |
References
- APPLE-SA-2009-06-17-1 vendor-advisory
- 55237 vdb-entry
- support.apple.com patch vendor-advisory
- 35414 vdb-entry
- 35433 vdb-entry
- ADV-2009-1621 vdb-entry vendor-advisory
- ipod-iphone-mpeg4-dos(51211) vdb-entry