Intrusion Prevention

iPhone.MobileSafari.LibTIFF.Buffer.Overflow

Description

The Iphone MobileSafari embedded web browser is vulnerable to a buffer overflow when parsing specially crafted TIFF image files. An attacker can exploit this issue to execute arbitrary commands on a remote system.

Affected Products

Apple iPhone 1.0
Apple iPhone 1.0.1
Apple iPhone 1.0.2
Apple iPhone 1.1.1

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Upgrade to Apple iPhone 1.1.2

CVE References

CVE-2006-3459