PT-2012-2750 · Apple · Ios

Pod2G · Publicado 2012-03-08 · Atualizado 2018-11-29 · CVE-2012-0642

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 5.1

Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in a device crash. This is achieved by using a crafted catalog file in an HFS disk image, which exploits an integer underflow.

Recommendations For versions prior to 5.1, update to version 5.1 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2012-0642

Produtos afetados

Ios

Referências · 6

• http://securitytracker.com/id?1026774 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-0642 · Nota de Segurança
• http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2012/May/msg00001.html · Aviso do Fabricante
• http://support.apple.com/kb/HT5281 · Aviso do Fabricante
• http://secunia.com/advisories/48288 · Nota