PT-2011-2204 · Apple · Ios

Comex · Publicado 2011-07-19 · Atualizado 2011-07-26 · CVE-2011-0227

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 4.2.9 Apple iOS versions 4.3.x prior to 4.3.4

Description The issue is related to the queueing primitives in IOMobileFrameBuffer, which do not properly perform type conversion. This allows local users to gain privileges via a crafted application.

Recommendations For Apple iOS versions prior to 4.2.9, update to version 4.2.9 or later. For Apple iOS versions 4.3.x prior to 4.3.4, update to version 4.3.4 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2011-0227

Produtos afetados

Ios

Referências · 5

• http://lists.apple.com/archives/security-announce/2011//Jul/msg00001.html · Aviso do Fabricante
• http://support.apple.com/kb/HT4802 · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2011//Jul/msg00000.html · Aviso do Fabricante
• http://support.apple.com/kb/HT4803 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2011-0227 · Nota de Segurança