Unscored CVE-2010-1810 EUVD-2010-1830GHSA-8765-h9hh-rh5j

FaceTime in Apple iOS before 4.1 on the iPhone and iPod touch does not properly handle invalid X.509 certificates, which allows man-in-the-…

Published Sep 9, 2010 · Updated Aug 7, 2024 · Assigned by apple

Description

FaceTime in Apple iOS before 4.1 on the iPhone and iPod touch does not properly handle invalid X.509 certificates, which allows man-in-the-middle attackers to redirect calls via a crafted certificate.

References

APPLE-SA-2010-09-08-1 vendor-advisory
http://support.apple.com/kb/HT4334
appleios-facetime-sec-bypass(61695) vdb-entry