Lucene search

K
nvd[email protected]NVD:CVE-2013-0964
HistoryJan 29, 2013 - 5:58 a.m.

CVE-2013-0964

2013-01-2905:58:54
CWE-20
web.nvd.nist.gov

3.6 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:P/A:N

5.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

The kernel in Apple iOS before 6.1 and Apple TV before 5.2 does not properly validate copyin and copyout arguments, which allows local users to bypass intended pointer restrictions and access locations in the first kernel-memory page by specifying a length of less than one page.

Affected configurations

NVD
Node
appletvosRange5.1.1
OR
appletvosMatch1.0.0
OR
appletvosMatch1.1.0
OR
appletvosMatch2.0.0
OR
appletvosMatch2.0.1
OR
appletvosMatch2.0.2
OR
appletvosMatch2.1.0
OR
appletvosMatch2.2.0
OR
appletvosMatch2.3.0
OR
appletvosMatch2.3.1
OR
appletvosMatch2.4.0
OR
appletvosMatch3.0.0
OR
appletvosMatch3.0.1
OR
appletvosMatch3.0.2
OR
appletvosMatch4.1.0
OR
appletvosMatch4.1.1
OR
appletvosMatch4.2.0
OR
appletvosMatch4.2.1
OR
appletvosMatch4.2.2
OR
appletvosMatch4.3.0
OR
appletvosMatch4.4.0
OR
appletvosMatch4.4.2
OR
appletvosMatch4.4.3
OR
appletvosMatch4.4.4
OR
appletvosMatch5.0.0
OR
appletvosMatch5.0.1
OR
appletvosMatch5.0.2
OR
appletvosMatch5.1.0
Node
appleiphone_osRange6.0.2
OR
appleiphone_osMatch6.0
OR
appleiphone_osMatch6.0.1

3.6 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:P/A:N

5.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%