Vulnerability Name: | CVE-2013-3950 (CCN-84808) | ||||||||
Assigned: | 2013-06-05 | ||||||||
Published: | 2013-06-05 | ||||||||
Updated: | 2013-10-31 | ||||||||
Summary: | Stack-based buffer overflow in the openSharedCacheFile function in dyld.cpp in dyld in Apple iOS 5.1.x and 6.x through 6.1.3 makes it easier for attackers to conduct untethering attacks via a long string in the DYLD_SHARED_CACHE_DIR environment variable. | ||||||||
CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
CVSS v2 Severity: | 5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N) 3.7 Low (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N/E:U/RL:OF/RC:C)
5.5 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
| ||||||||
Vulnerability Type: | CWE-119 | ||||||||
Vulnerability Consequences: | Gain Access | ||||||||
References: | Source: CCN Type: Stefan Esser Mountain Lion/iOS Vulnerabilities Garage Sale Source: MISC Type: Exploit, Vendor Advisory http://antid0te.com/syscan_2013/SyScan2013_Mountain_Lion_iOS_Vulnerabilities_Garage_Sale_Whitepaper.pdf Source: MITRE Type: CNA CVE-2013-3950 Source: APPLE Type: UNKNOWN APPLE-SA-2013-10-22-3 Source: APPLE Type: UNKNOWN APPLE-SA-2013-09-18-2 Source: CONFIRM Type: UNKNOWN http://support.apple.com/kb/HT5934 Source: CCN Type: Apple Web site Apple Source: CCN Type: BID-60437 Apple iOS CVE-2013-3950 Stack Based Buffer Overflow Vulnerability Source: SECTRACK Type: UNKNOWN 1029054 Source: MISC Type: UNKNOWN http://www.syscan.org/index.php/sg/program/day/2 Source: XF Type: UNKNOWN appleios-cve20133950-bo(84808) | ||||||||
Vulnerable Configuration: | Configuration 1: Configuration 2: Denotes that component is vulnerable | ||||||||
BACK |