Vulnerability in Apple Iphone OS

CVE-2009-2815

The Telephony component in Apple iPhone OS before 3.1 does not properly handle SMS arrival notifications, which allows remote attackers to cause a denial of service (NULL pointer dereference and service interruption) via a crafted SMS message.

EPSS: 0.025 (82.8th percentile) — read the EPSS interpretation.

Affected products

Apple Iphone_os — versions 1.0, 1.0.0, 1.0.1
N/a — versions n/a

Weakness classification (CWE)

CWE-399

References

cve@mitre.org (vendor-advisory, x_refsource_APPLE, Patch, Vendor Advisory)
cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)