Apple iOS Multiple Vulnerabilities
Last Update Date:
20 Mar 2013 14:58
Release Date:
20 Mar 2013
4240
Views
RISK: Medium Risk
TYPE: Operating Systems - Mobile & Apps
Multiple vulnerabilities have been identified in Apple iOS. A local user can obtain elevated privileges on the target system.
- A local user can exploit a flaw in the handling of Mach-O executable files with overlapping segments to execute unsigned code on the target system.
- A local user can exploit a flaw in the ARM prefetch abort handling to determine the address of structures in the kernel.
- A local user can conduct a symlink attack on files restore by backup using Lockdown to modify permissions on target files.
- A local user can exploit a flaw in the IOUSBDeviceFamily driver to execute arbitrary code with kernel level privileges.
Impact
- Elevation of Privilege
- Remote Code Execution
- Information Disclosure
System / Technologies affected
- Apple iOS version prior to 6.1.3
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- The vendor has issued a fix (iOS 6.1.3) as part of APPLE-SA-2013-03-19-1 iOS 6.1.3.
Vulnerability Identifier
Source
Related Link
Share with