The extensions APIs in the kernel in Apple iOS before 6.0.1 provide kernel addresses in responses that contain an OSBundleMachOHeaders key, which makes it easier for remote attackers to bypass the ASLR protection mechanism via a crafted app.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Ios | — | Upgrade to the latest version of Apple iOS | Oct 8, 2014 | Nov 3, 2012 |
| Apple Osx Kernel | — | Upgrade macOS to the latest version | Apr 3, 2013 | Nov 3, 2012 |
| Apple Osx Note | — | Apply OS X security update 2013-001Upgrade macOS to the latest versionApply OS X security update 2013-002 | Aug 28, 2015 | Nov 3, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub