CVEvulnerability
CVE-2011-3442
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-11-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-399
Description
The kernel in Apple iOS before 5.0.1 does not ensure the validity of flag combinations for an mmap system call, which allows local users to execute arbitrary unsigned code via a crafted app.
Affected configurations
• apple iphone os 4.3.0
• apple iphone os 4.3.1
• apple iphone os 4.3.2
• apple iphone os 4.3.3
• apple iphone os 4.3.4
• apple iphone os 4.3.5
• apple iphone os 5.0
Related
Weakness · not in database (1)
References
- http://lists.apple.com/archives/Security-announce/2011/Nov/msg00001.html Vendor Advisory
- http://support.apple.com/kb/HT5052 Vendor Advisory
- http://www.securitytracker.com/id?1026287 www.securitytracker.com
- http://lists.apple.com/archives/Security-announce/2011/Nov/msg00001.html Vendor Advisory
- http://support.apple.com/kb/HT5052 Vendor Advisory
- http://www.securitytracker.com/id?1026287 www.securitytracker.com