CVE-2010-1752

MediumCVSS 6.8/10Last modified Jun 16, 2026

Description

Stack-based buffer overflow in CFNetwork in Apple iOS before 4 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to URL handling.

Metrics

CVSS 2.0 6.8/10AV:N/AC:M/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.htmlMailing List, Vendor Advisory
http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.htmlMailing List, Vendor Advisory
http://support.apple.com/kb/HT4225Vendor Advisory
http://support.apple.com/kb/HT4435Vendor Advisory
http://www.securityfocus.com/bid/41016Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/59631Third Party Advisory, VDB Entry
http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.htmlMailing List, Vendor Advisory
http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.htmlMailing List, Vendor Advisory
http://support.apple.com/kb/HT4225Vendor Advisory
http://support.apple.com/kb/HT4435Vendor Advisory
http://www.securityfocus.com/bid/41016Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/59631Third Party Advisory, VDB Entry

Timeline

Published: Jun 22, 2010
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-17536.8ImageIO in Apple iOS before 4 on the iPhone and iPod touch allows remote attackers to execute arbitrary code or cause a denial of service (m CVE-2010-17546.9Passcode Lock in Apple iOS before 4 on the iPhone and iPod touch does not properly handle alert-based unlocks in conjunction with subsequent CVE-2010-17554.3Safari in Apple iOS before 4 on the iPhone and iPod touch does not properly implement the Accept Cookies preference, which makes it easier f CVE-2010-17565.8The Settings application in Apple iOS before 4 on the iPhone and iPod touch does not properly report the wireless network that is in use, wh CVE-2010-17576.4WebKit in Apple iOS before 4 on the iPhone and iPod touch does not enforce the expected boundary restrictions on content display by an IFRAM CVE-2010-17589.3Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4 CVE-2010-17599.3Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4 CVE-2010-176010.0loader/DocumentThreadableLoader.cpp in the XMLHttpRequest implementation in WebCore in WebKit before r58409 does not properly handle credent CVE-2010-17619.3Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4 CVE-2010-17624.3Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on M CVE-2010-176310.0Unspecified vulnerability in WebKit in Apple iTunes before 9.2 on Windows has unknown impact and attack vectors, a different vulnerability t CVE-2010-17644.3WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, follows multiple redirections