CVE-2010-1751

{"id": "CVE-2010-1751", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-06-22T20:30:01.523", "references": [{"url": "http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html", "tags": ["Mailing List", "Vendor Advisory"], "source": "product-security@apple.com"}, {"url": "http://support.apple.com/kb/HT4225", "tags": ["Vendor Advisory"], "source": "product-security@apple.com"}, {"url": "http://www.securityfocus.com/bid/41016", "tags": ["Third Party Advisory", "VDB Entry"], "source": "product-security@apple.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59630", "tags": ["VDB Entry"], "source": "product-security@apple.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "Application Sandbox in Apple iOS before 4 on the iPhone and iPod touch does not prevent photo-library access, which might allow remote attackers to obtain location information via unspecified vectors."}, {"lang": "es", "value": "Application Sandbox en Apple iOS en versiones anteriores a la 4 en el iPhone y iPod touch no impide el acceso a la fototeca, lo que puede permitir a atacantes remotos obtener informaci\u00f3n de la ubicaci\u00f3n mediante vectores no especificados."}], "lastModified": "2022-08-09T13:48:59.970", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "73DE6E60-6BDD-450C-B7E2-744A0183A2DD", "versionEndExcluding": "4.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:apple:ipod_touch:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F9F4CB31-584D-4810-A35C-31D5702853C9"}, {"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "340C4071-1447-477F-942A-8E09EA29F917"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "product-security@apple.com", "evaluatorSolution": "Per: http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html\r\n\r\n'Installation note:\r\n\r\n\r\nThese updates are only available through iTunes, and will not appear\r\nin your computer's Software Update application, or in the Apple\r\nDownloads site. Make sure you have an Internet connection and have\r\ninstalled the latest version of iTunes from www.apple.com/itunes/\r\n\r\n\r\niTunes will automatically check Apple's update server on its weekly\r\nschedule. When an update is detected, it will download it. When\r\nthe iPhone or iPod touch is docked, iTunes will present the user with\r\nthe option to install the update. We recommend applying the update\r\nimmediately if possible. Selecting Don't Install will present the\r\noption the next time you connect your iPhone or iPod touch.\r\n\r\n\r\nThe automatic update process may take up to a week depending on the\r\nday that iTunes checks for updates. You may manually obtain the\r\nupdate via the Check for Updates button within iTunes. After doing\r\nthis, the update can be applied when your iPhone or iPod touch is\r\ndocked to your computer.\r\n\r\n\r\nTo check that the iPhone or iPod touch has been updated:\r\n\r\n\r\n* Navigate to Settings\r\n* Select General\r\n* Select About. The version after applying this update will be\r\n\"4.0 (8A293)\" or later."}