Description
dyld in Apple iOS before 6.1.3 and Apple TV before 5.2.1 does not properly manage the state of file loading for Mach-O executable files, which allows local users to bypass intended code-signing requirements via a file that contains overlapping segments.
References
- APPLE-SA-2013-03-19-2 vendor-advisory
- APPLE-SA-2013-03-19-1 vendor-advisory
- http://support.apple.com/kb/HT5702
- http://support.apple.com/kb/HT5704