NetSight
IP …
low2.1

CVE-2013-0978

The ARM prefetch abort handler in the kernel in Apple iOS before 6.1.3 and Apple TV before 5.2.1 does not ensure that it has been invoked in an abort context, …

Impact

The ARM prefetch abort handler in the kernel in Apple iOS before 6.1.3 and Apple TV before 5.2.1 does not ensure that it has been invoked in an abort context, which makes it easier for local users to bypass the ASLR protection mechanism via crafted code.

Affected products

VendorProductAffected versions
AppleIphone Os
through 6.1.2
Versions 1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.1.1
AppleTvos
through 5.2.0
Versions 1.0.0, 1.1.0, 2.0.0, 2.0.1, 2.0.2

Weakness classification

CWE-200

References