Lucene search

K
cve[email protected]CVE-2012-0643
HistoryMar 08, 2012 - 10:55 p.m.

CVE-2012-0643

2012-03-0822:55:04
CWE-264
web.nvd.nist.gov
28
apple
ios
kernel
cve-2012-0643
sandbox restrictions
remote attackers
arbitrary code
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.1 High

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.1%

The kernel in Apple iOS before 5.1 does not properly handle debug system calls, which allows remote attackers to bypass sandbox restrictions and execute arbitrary code via a crafted program.

Affected configurations

NVD
Node
appleiphone_osRange<5.1
CPENameOperatorVersion
apple:iphone_osapple iphone oslt5.1

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.1 High

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.1%