CVE-2010-1810

 

Published at: - 10-09-2010 12:00

Last modified: - 02-09-2022 03:42

Total changes: - 3

Description

FaceTime in Apple iOS before 4.1 on the iPhone and iPod touch does not properly handle invalid X.509 certificates, which allows man-in-the-middle attackers to redirect calls via a crafted certificate.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:S/C:N/I:P/A:N

 

Verification logic

 

Reference

• APPLE-SA-2010-09-08-1-Vendor Advisory
• http://support.apple.com/kb/HT4334
• appleios-facetime-sec-bypass(61695)-

 

Keywords

NVD

 

CVE-2010-1810

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures