Lucene search

PRIOn knowledge basePRION:CVE-2013-0978

HistoryMar 20, 2013 - 2:55 p.m.

Code injection

2013-03-2014:55:00

PRIOn knowledge base

www.prio-n.com

5.8 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.4%

JSON

The ARM prefetch abort handler in the kernel in Apple iOS before 6.1.3 and Apple TV before 5.2.1 does not ensure that it has been invoked in an abort context, which makes it easier for local users to bypass the ASLR protection mechanism via crafted code.

CPENameOperatorVersion
iphone_oseq2.0.2 ipodtouch
iphone_oseq3.0
iphone_oseq3.2
iphone_oseq3.1.3
iphone_oseq1.0.2
iphone_oseq1.1.2 ipodtouch
iphone_oseq4.3.2
iphone_oseq4.0.2
iphone_oseq2.2
iphone_oseq4.0.1 ipodtouch

Name	Operator	Version
iphone_os	eq	2.0.2 ipodtouch
iphone_os	eq	3.0
iphone_os	eq	3.2
iphone_os	eq	3.1.3
iphone_os	eq	1.0.2
iphone_os	eq	1.1.2 ipodtouch
iphone_os	eq	4.3.2
iphone_os	eq	4.0.2
iphone_os	eq	2.2
iphone_os	eq	4.0.1 ipodtouch

Rows per page:

1-10 of 1011

References

lists.apple.com/archives/security-announce/2013/Mar/msg00004.html

lists.apple.com/archives/security-announce/2013/Mar/msg00005.html

support.apple.com/kb/HT5702

support.apple.com/kb/HT5704

5.8 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.4%

JSON

Related for PRION:CVE-2013-0978