PT-2013-2773 · Apple · Tv+1

Evad3Rs · Published 2013-03-20 · Updated 2019-09-26 · CVE-2013-0981

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions iOS versions prior to 6.1.3 Apple TV versions prior to 5.2.1

Description The issue is related to the IOUSBDeviceFamily driver in the USB implementation in the kernel, which accesses pipe object pointers that originated in userspace. This allows local users to gain privileges via crafted code.

Recommendations For iOS versions prior to 6.1.3, update to version 6.1.3 or later. For Apple TV versions prior to 5.2.1, update to version 5.2.1 or later.

Fix

Related Identifiers

CVE-2013-0981

Affected Products

Tv

Ios

References · 5

• http://support.apple.com/kb/HT5702 · Vendor Advisory
• http://support.apple.com/kb/HT5704 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2013/Mar/msg00005.html · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2013/Mar/msg00004.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-0981 · Security Note