Unscored CVE-2013-0978 EUVD-2013-0989GHSA-w4wq-5jxq-9m44

The ARM prefetch abort handler in the kernel in Apple iOS before 6.1.3 and Apple TV before 5.2.1 does not ensure that it has been invoked i…

Published Mar 20, 2013 · Updated Sep 17, 2024 · Assigned by apple

Description

The ARM prefetch abort handler in the kernel in Apple iOS before 6.1.3 and Apple TV before 5.2.1 does not ensure that it has been invoked in an abort context, which makes it easier for local users to bypass the ASLR protection mechanism via crafted code.

References

APPLE-SA-2013-03-19-2 vendor-advisory
APPLE-SA-2013-03-19-1 vendor-advisory
http://support.apple.com/kb/HT5702
http://support.apple.com/kb/HT5704