CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
Confidence
Low
EPSS
Percentile
77.5%
The extensions APIs in the kernel in Apple iOS before 6.0.1 provide kernel addresses in responses that contain an OSBundleMachOHeaders key, which makes it easier for remote attackers to bypass the ASLR protection mechanism via a crafted app.
Vendor | Product | Version | CPE |
---|---|---|---|
apple | iphone_os | * | cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* |
apple | iphone_os | 1.0.0 | cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:* |
apple | iphone_os | 1.0.1 | cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:* |
apple | iphone_os | 1.0.2 | cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:* |
apple | iphone_os | 1.1.0 | cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:* |
apple | iphone_os | 1.1.1 | cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:* |
apple | iphone_os | 1.1.2 | cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:* |
apple | iphone_os | 1.1.3 | cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:* |
apple | iphone_os | 1.1.4 | cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:* |
apple | iphone_os | 1.1.5 | cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:* |
archives.neohapsis.com/archives/bugtraq/2012-11/0012.html
lists.apple.com/archives/security-announce/2012/Nov/msg00000.html
lists.apple.com/archives/security-announce/2013/Mar/msg00002.html
secunia.com/advisories/51445
support.apple.com/kb/HT5567
support.apple.com/kb/HT5598
www.securityfocus.com/bid/56361