Lucene search
HistoryMar 20, 2013 - 2:55 p.m.
CVE-2013-0978
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
AI Score
5.5
Confidence
Low
EPSS
0
Percentile
5.1%
The ARM prefetch abort handler in the kernel in Apple iOS before 6.1.3 and Apple TV before 5.2.1 does not ensure that it has been invoked in an abort context, which makes it easier for local users to bypass the ASLR protection mechanism via crafted code.
Affected configurations
Node
appleiphone_osRange≤6.1.2
ORappleiphone_osMatch1.0.0
ORappleiphone_osMatch1.0.1
ORappleiphone_osMatch1.0.2
ORappleiphone_osMatch1.1.0
ORappleiphone_osMatch1.1.0-ipodtouch
ORappleiphone_osMatch1.1.1
ORappleiphone_osMatch1.1.2
ORappleiphone_osMatch1.1.2-ipodtouch
ORappleiphone_osMatch1.1.3
ORappleiphone_osMatch1.1.3-ipodtouch
ORappleiphone_osMatch1.1.4
ORappleiphone_osMatch1.1.4-ipodtouch
ORappleiphone_osMatch1.1.5
ORappleiphone_osMatch1.1.5-ipodtouch
ORappleiphone_osMatch2.0
ORappleiphone_osMatch2.0.0
ORappleiphone_osMatch2.0.0-ipodtouch
ORappleiphone_osMatch2.0.1
ORappleiphone_osMatch2.0.1-ipodtouch
ORappleiphone_osMatch2.0.2
ORappleiphone_osMatch2.0.2-ipodtouch
ORappleiphone_osMatch2.1
ORappleiphone_osMatch2.1-ipodtouch
ORappleiphone_osMatch2.1.1
ORappleiphone_osMatch2.2
ORappleiphone_osMatch2.2-ipodtouch
ORappleiphone_osMatch2.2.1
ORappleiphone_osMatch2.2.1-ipodtouch
ORappleiphone_osMatch3.0
ORappleiphone_osMatch3.0-ipodtouch
ORappleiphone_osMatch3.0.1
ORappleiphone_osMatch3.0.1-ipodtouch
ORappleiphone_osMatch3.1
ORappleiphone_osMatch3.1-ipodtouch
ORappleiphone_osMatch3.1.2
ORappleiphone_osMatch3.1.2-ipodtouch
ORappleiphone_osMatch3.1.3
ORappleiphone_osMatch3.1.3-ipodtouch
ORappleiphone_osMatch3.2
ORappleiphone_osMatch3.2-ipodtouch
ORappleiphone_osMatch3.2.1
ORappleiphone_osMatch3.2.1-ipad
ORappleiphone_osMatch3.2.2
ORappleiphone_osMatch4.0
ORappleiphone_osMatch4.0-ipodtouch
ORappleiphone_osMatch4.0.1
ORappleiphone_osMatch4.0.1-ipodtouch
ORappleiphone_osMatch4.0.2
ORappleiphone_osMatch4.1
ORappleiphone_osMatch4.2.1
ORappleiphone_osMatch4.2.5
ORappleiphone_osMatch4.2.8
ORappleiphone_osMatch4.3.0
ORappleiphone_osMatch4.3.1
ORappleiphone_osMatch4.3.2
ORappleiphone_osMatch4.3.3
ORappleiphone_osMatch4.3.5
ORappleiphone_osMatch4.3.5-ipad
ORappleiphone_osMatch4.3.5-ipodtouch
ORappleiphone_osMatch5.0
ORappleiphone_osMatch5.0-ipad
ORappleiphone_osMatch5.0-ipodtouch
ORappleiphone_osMatch5.0.1
ORappleiphone_osMatch5.0.1-ipad
ORappleiphone_osMatch5.0.1-ipodtouch
ORappleiphone_osMatch5.1
ORappleiphone_osMatch5.1.1
ORappleiphone_osMatch6.0
ORappleiphone_osMatch6.0.1
ORappleiphone_osMatch6.0.2
ORappleiphone_osMatch6.1
Node
appletvosRange≤5.2.0
ORappletvosMatch1.0.0
ORappletvosMatch1.1.0
ORappletvosMatch2.0.0
ORappletvosMatch2.0.1
ORappletvosMatch2.0.2
ORappletvosMatch2.1.0
ORappletvosMatch2.2.0
ORappletvosMatch2.3.0
ORappletvosMatch2.3.1
ORappletvosMatch2.4.0
ORappletvosMatch3.0.0
ORappletvosMatch3.0.1
ORappletvosMatch3.0.2
ORappletvosMatch4.1.0
ORappletvosMatch4.1.1
ORappletvosMatch4.2.0
ORappletvosMatch4.2.1
ORappletvosMatch4.2.2
ORappletvosMatch4.3.0
ORappletvosMatch4.4.0
ORappletvosMatch4.4.2
ORappletvosMatch4.4.3
ORappletvosMatch4.4.4
ORappletvosMatch5.0.0
ORappletvosMatch5.0.1
ORappletvosMatch5.0.2
ORappletvosMatch5.1.0
ORappletvosMatch5.1.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| apple | iphone_os | * | cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* |
| apple | iphone_os | 1.0.0 | cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:* |
| apple | iphone_os | 1.0.1 | cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:* |
| apple | iphone_os | 1.0.2 | cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:* |
| apple | iphone_os | 1.1.0 | cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:* |
| apple | iphone_os | 1.1.0 | cpe:2.3:o:apple:iphone_os:1.1.0:-:ipodtouch:*:*:*:*:* |
| apple | iphone_os | 1.1.1 | cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:* |
| apple | iphone_os | 1.1.2 | cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:* |
| apple | iphone_os | 1.1.2 | cpe:2.3:o:apple:iphone_os:1.1.2:-:ipodtouch:*:*:*:*:* |
| apple | iphone_os | 1.1.3 | cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2013-0978
2022-10-03 16:15:04
cvelist
cvelist
CVE-2013-0978
2022-10-03 16:15:04
prion
prion
Code injection
2013-03-20 14:55:00
securityvulns
securityvulns
Apple TV multiple security vulnerabilities
2013-03-24 00:00:00
APPLE-SA-2013-03-19-2 Apple TV 5.2.1
2013-03-24 00:00:00
Apple iOS multiple security vulnerabilities
2013-03-24 00:00:00
nessus
nessus
Apple iOS < 6.1.3 Multiple Vulnerabilities
2013-03-20 00:00:00
Apple iOS < 6.1.3 Multiple Vulnerabilities
2013-03-20 00:00:00
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
AI Score
5.5
Confidence
Low
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2013-0978