CVEvulnerability
CVE-2013-0978
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2013-03-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The ARM prefetch abort handler in the kernel in Apple iOS before 6.1.3 and Apple TV before 5.2.1 does not ensure that it has been invoked in an abort context, which makes it easier for local users to bypass the ASLR protection mechanism via crafted code.
Affected configurations
• apple iphone os (<= 6.1.2)
• apple iphone os 1.0.0
• apple iphone os 1.0.1
• apple iphone os 1.0.2
• apple iphone os 1.1.0
• apple iphone os 1.1.1
• apple iphone os 1.1.2
• apple iphone os 1.1.3
• apple iphone os 1.1.4
• apple iphone os 1.1.5
• apple iphone os 2.0
• apple iphone os 2.0.0
• apple iphone os 2.0.1
• apple iphone os 2.0.2
• apple iphone os 2.1
• apple iphone os 2.1.1
• apple iphone os 2.2
• apple iphone os 2.2.1
• apple iphone os 3.0
• apple iphone os 3.0.1
• apple iphone os 3.1
• apple iphone os 3.1.2
• apple iphone os 3.1.3
• apple iphone os 3.2
• apple iphone os 3.2.1
• apple iphone os 3.2.2
• apple iphone os 4.0
• apple iphone os 4.0.1
• apple iphone os 4.0.2
• apple iphone os 4.1
• apple iphone os 4.2.1
• apple iphone os 4.2.5
• apple iphone os 4.2.8
• apple iphone os 4.3.0
• apple iphone os 4.3.1
• apple iphone os 4.3.2
• apple iphone os 4.3.3
• apple iphone os 4.3.5
• apple iphone os 5.0
• apple iphone os 5.0.1
• apple iphone os 5.1
• apple iphone os 5.1.1
• apple iphone os 6.0
• apple iphone os 6.0.1
• apple iphone os 6.0.2
• apple iphone os 6.1
• apple tvos (<= 5.2.0)
• apple tvos 1.0.0
• apple tvos 1.1.0
• apple tvos 2.0.0
• apple tvos 2.0.1
• apple tvos 2.0.2
• apple tvos 2.1.0
• apple tvos 2.2.0
• apple tvos 2.3.0
• apple tvos 2.3.1
• apple tvos 2.4.0
• apple tvos 3.0.0
• apple tvos 3.0.1
• apple tvos 3.0.2
… and 15 more
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://lists.apple.com/archives/security-announce/2013/Mar/msg00004.html Vendor Advisory
- http://lists.apple.com/archives/security-announce/2013/Mar/msg00005.html Vendor Advisory
- http://support.apple.com/kb/HT5702 Vendor Advisory
- http://support.apple.com/kb/HT5704 Vendor Advisory
- http://lists.apple.com/archives/security-announce/2013/Mar/msg00004.html Vendor Advisory
- http://lists.apple.com/archives/security-announce/2013/Mar/msg00005.html Vendor Advisory
- http://support.apple.com/kb/HT5702 Vendor Advisory
- http://support.apple.com/kb/HT5704 Vendor Advisory