PT-2013-2758 · Apple · Tv+1

Mark Dowd · Published 2013-01-29 · Updated 2019-03-08 · CVE-2013-0964

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 6.1 Apple TV versions prior to 5.2

Description The issue is related to the kernel's validation of copyin and copyout arguments. Local users can bypass intended pointer restrictions and access certain locations in kernel memory by providing a length of less than one page.

Recommendations For Apple iOS versions prior to 6.1, update to version 6.1 or later. For Apple TV versions prior to 5.2, update to version 5.2 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2013-0964

Affected Products

Tv

Ios

References · 7

• http://support.apple.com/kb/HT5642 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2013/Jan/msg00001.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-0964 · Security Note
• http://support.apple.com/kb/HT5643 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2013/Jan/msg00000.html · Vendor Advisory
• http://securityfocus.com/bid/57595 · Note
• http://osvdb.org/89659 · Note