CVEvulnerability

CVE-2012-0646

9.3 HIGH Published 2012-03-08 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2012-03-08
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses: CWE-134

Description

Format string vulnerability in VPN in Apple iOS before 5.1 allows remote attackers to execute arbitrary code via a crafted racoon configuration file.

Affected configurations

• apple iphone os (< 5.1)

Related

Weakness · CWE (1)

CWE-134 Use of Externally-Controlled Format String weakness

References

http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html Mailing List, Vendor Advisory
http://secunia.com/advisories/48288 Third Party Advisory
http://www.securitytracker.com/id?1026774 Third Party Advisory, VDB Entry
http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html Mailing List, Vendor Advisory
http://secunia.com/advisories/48288 Third Party Advisory
http://www.securitytracker.com/id?1026774 Third Party Advisory, VDB Entry