CyberSec.Space Logo
Back to CVE Browser

CVE-2009-2204

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0550%
EPSS Percentile11.48th
PublishedAug 3, 2009
Last ModifiedApr 23, 2026

Vulnerability Description

Unspecified vulnerability in the CoreTelephony component in Apple iPhone OS before 3.0.1 allows remote attackers to execute arbitrary code, obtain GPS coordinates, or enable the microphone via an SMS message that triggers memory corruption, as demonstrated by Charlie Miller at SyScan '09 Singapore.

Affected Platforms (CPE)

πŸ’»
Apple

Iphone Os

<= 3.0
πŸ’»
Apple

Iphone Os

= 1.0
πŸ’»
Apple

Iphone Os

= 1.0.0
πŸ’»
Apple

Iphone Os

= 1.0.1
πŸ’»
Apple

Iphone Os

= 1.0.2
πŸ’»
Apple

Iphone Os

= 1.1
πŸ’»
Apple

Iphone Os

= 1.1.0
πŸ’»
Apple

Iphone Os

= 1.1.1
πŸ’»
Apple

Iphone Os

= 1.1.2
πŸ’»
Apple

Iphone Os

= 1.1.3
πŸ’»
Apple

Iphone Os

= 1.1.4
πŸ’»
Apple

Iphone Os

= 1.1.5
πŸ’»
Apple

Iphone Os

= 2.0
πŸ’»
Apple

Iphone Os

= 2.0.0
πŸ’»
Apple

Iphone Os

= 2.0.1
πŸ’»
Apple

Iphone Os

= 2.0.2
πŸ’»
Apple

Iphone Os

= 2.1

References & Advisories

Related Vulnerabilities