2.1

CVE-2013-0978

The ARM prefetch abort handler in the kernel in Apple iOS before 6.1.3 and Apple TV before 5.2.1 does not ensure that it has been invoked in an abort context, which makes it easier for local users to bypass the ASLR protection mechanism via crafted code.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ iPhone OS Version <= 6.1.2
Apple ≫ iPhone OS Version1.0.0
Apple ≫ iPhone OS Version1.0.1
Apple ≫ iPhone OS Version1.0.2
Apple ≫ iPhone OS Version1.1.0
Apple ≫ iPhone OS Version1.1.0 Update- Editionipodtouch
Apple ≫ iPhone OS Version1.1.1
Apple ≫ iPhone OS Version1.1.2
Apple ≫ iPhone OS Version1.1.2 Update- Editionipodtouch
Apple ≫ iPhone OS Version1.1.3
Apple ≫ iPhone OS Version1.1.3 Update- Editionipodtouch
Apple ≫ iPhone OS Version1.1.4
Apple ≫ iPhone OS Version1.1.4 Update- Editionipodtouch
Apple ≫ iPhone OS Version1.1.5
Apple ≫ iPhone OS Version1.1.5 Update- Editionipodtouch
Apple ≫ iPhone OS Version2.0
Apple ≫ iPhone OS Version2.0.0
Apple ≫ iPhone OS Version2.0.0 Update- Editionipodtouch
Apple ≫ iPhone OS Version2.0.1
Apple ≫ iPhone OS Version2.0.1 Update- Editionipodtouch
Apple ≫ iPhone OS Version2.0.2
Apple ≫ iPhone OS Version2.0.2 Update- Editionipodtouch
Apple ≫ iPhone OS Version2.1
Apple ≫ iPhone OS Version2.1 Update- Editionipodtouch
Apple ≫ iPhone OS Version2.1.1
Apple ≫ iPhone OS Version2.2
Apple ≫ iPhone OS Version2.2 Update- Editionipodtouch
Apple ≫ iPhone OS Version2.2.1
Apple ≫ iPhone OS Version2.2.1 Update- Editionipodtouch
Apple ≫ iPhone OS Version3.0
Apple ≫ iPhone OS Version3.0 Update- Editionipodtouch
Apple ≫ iPhone OS Version3.0.1
Apple ≫ iPhone OS Version3.0.1 Update- Editionipodtouch
Apple ≫ iPhone OS Version3.1
Apple ≫ iPhone OS Version3.1 Update- Editionipodtouch
Apple ≫ iPhone OS Version3.1.2
Apple ≫ iPhone OS Version3.1.2 Update- Editionipodtouch
Apple ≫ iPhone OS Version3.1.3
Apple ≫ iPhone OS Version3.1.3 Update- Editionipodtouch
Apple ≫ iPhone OS Version3.2
Apple ≫ iPhone OS Version3.2 Update- Editionipodtouch
Apple ≫ iPhone OS Version3.2.1
Apple ≫ iPhone OS Version3.2.1 Update- Editionipad
Apple ≫ iPhone OS Version3.2.2
Apple ≫ iPhone OS Version4.0
Apple ≫ iPhone OS Version4.0 Update- Editionipodtouch
Apple ≫ iPhone OS Version4.0.1
Apple ≫ iPhone OS Version4.0.1 Update- Editionipodtouch
Apple ≫ iPhone OS Version4.0.2
Apple ≫ iPhone OS Version4.1
Apple ≫ iPhone OS Version4.2.1
Apple ≫ iPhone OS Version4.2.5
Apple ≫ iPhone OS Version4.2.8
Apple ≫ iPhone OS Version4.3.0
Apple ≫ iPhone OS Version4.3.1
Apple ≫ iPhone OS Version4.3.2
Apple ≫ iPhone OS Version4.3.3
Apple ≫ iPhone OS Version4.3.5
Apple ≫ iPhone OS Version4.3.5 Update- Editionipad
Apple ≫ iPhone OS Version4.3.5 Update- Editionipodtouch
Apple ≫ iPhone OS Version5.0
Apple ≫ iPhone OS Version5.0 Update- Editionipad
Apple ≫ iPhone OS Version5.0 Update- Editionipodtouch
Apple ≫ iPhone OS Version5.0.1
Apple ≫ iPhone OS Version5.0.1 Update- Editionipad
Apple ≫ iPhone OS Version5.0.1 Update- Editionipodtouch
Apple ≫ iPhone OS Version5.1
Apple ≫ iPhone OS Version5.1.1
Apple ≫ iPhone OS Version6.0
Apple ≫ iPhone OS Version6.0.1
Apple ≫ iPhone OS Version6.0.2
Apple ≫ iPhone OS Version6.1
Apple ≫ tvOS Version <= 5.2.0
Apple ≫ tvOS Version1.0.0
Apple ≫ tvOS Version1.1.0
Apple ≫ tvOS Version2.0.0
Apple ≫ tvOS Version2.0.1
Apple ≫ tvOS Version2.0.2
Apple ≫ tvOS Version2.1.0
Apple ≫ tvOS Version2.2.0
Apple ≫ tvOS Version2.3.0
Apple ≫ tvOS Version2.3.1
Apple ≫ tvOS Version2.4.0
Apple ≫ tvOS Version3.0.0
Apple ≫ tvOS Version3.0.1
Apple ≫ tvOS Version3.0.2
Apple ≫ tvOS Version4.1.0
Apple ≫ tvOS Version4.1.1
Apple ≫ tvOS Version4.2.0
Apple ≫ tvOS Version4.2.1
Apple ≫ tvOS Version4.2.2
Apple ≫ tvOS Version4.3.0
Apple ≫ tvOS Version4.4.0
Apple ≫ tvOS Version4.4.2
Apple ≫ tvOS Version4.4.3
Apple ≫ tvOS Version4.4.4
Apple ≫ tvOS Version5.0.0
Apple ≫ tvOS Version5.0.1
Apple ≫ tvOS Version5.0.2
Apple ≫ tvOS Version5.1.0
Apple ≫ tvOS Version5.1.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.06% 0.192
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.