PT-2013-5388 · Apple · Ios

Publicado 2013-09-19 · Atualizado 2013-10-31 · CVE-2013-5142

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7

Description The issue concerns the kernel in Apple iOS, which fails to initialize certain kernel data structures properly. This allows local users to access sensitive information from kernel stack memory. The exploitation can occur via the (1) msgctl API or (2) segctl API.

Recommendations For versions prior to 7, update to version 7 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2013-5142

Produtos afetados

Ios

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2013-5142 · Nota de Segurança
• http://support.apple.com/kb/HT5934 · Aviso do Fabricante
• http://securitytracker.com/id/1029054 · Nota
• http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html · Aviso do Fabricante