Описание
The kernel in Apple iOS before 5.0.1 does not ensure the validity of flag combinations for an mmap system call, which allows local users to execute arbitrary unsigned code via a crafted app.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:o:apple:iphone_os:4.3.0:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:4.3.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:4.3.2:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:4.3.3:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:4.3.4:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:4.3.5:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:4.3.5:-:ipad:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:4.3.5:-:ipodtouch:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:5.0:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:5.0:-:ipad:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:5.0:-:iphone:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:5.0:-:ipodtouch:*:*:*:*:*
EPSS
Процентиль: 15%
0.00048
Низкий
7.2 High
CVSS2
Дефекты
CWE-399
Связанные уязвимости
github
больше 3 лет назад
The kernel in Apple iOS before 5.0.1 does not ensure the validity of flag combinations for an mmap system call, which allows local users to execute arbitrary unsigned code via a crafted app.
EPSS
Процентиль: 15%
0.00048
Низкий
7.2 High
CVSS2
Дефекты
CWE-399