What’s Vulnerable › Vulnerabilities

CVE-2010-2973

• Severity: medium (CVSS 6.9 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2010-08-05 · updated 2026-06-16
• Weakness: CWE-264

Description

Integer overflow in IOSurface in Apple iOS before 4.0.2 on the iPhone and iPod touch, and before 3.2.2 on the iPad, allows local users to gain privileges via vectors involving IOSurface properties, as demonstrated by JailbreakMe.

Affected products

• Apple Iphone Os: 4.0, 4.0.1

References

• http://lists.apple.com/archives/security-announce/2010//Aug/msg00000.html
• http://lists.apple.com/archives/security-announce/2010//Aug/msg00001.html
• http://osvdb.org/66827
• http://secunia.com/advisories/40807
• http://support.apple.com/kb/HT4291
• http://support.apple.com/kb/HT4292
• http://www.exploit-db.com/exploits/14538
• http://www.securityfocus.com/bid/42151
• http://lists.apple.com/archives/security-announce/2010//Aug/msg00000.html
• http://lists.apple.com/archives/security-announce/2010//Aug/msg00001.html
• http://osvdb.org/66827
• http://secunia.com/advisories/40807

Get alerted when CVE-2010-2973 or the next vulnerability affects your stack