MEDIUM
dyld in Apple iOS before 6.1.3 and Apple TV before 5.2.1 does not properly manage the state of file loading for Mach-O executable files, which allows local users to bypass intended code-signing requirements via a file that contains overlapping segments
Published Mar 20, 2013
4.6
MEDIUMCVSS 2.0
EPSS 0.35%
Description
dyld in Apple iOS before 6.1.3 and Apple TV before 5.2.1 does not properly manage the state of file loading for Mach-O executable files, which allows local users to bypass intended code-signing requirements via a file that contains overlapping segments.
Affected products
No data.
Configuration 1
OR
- ≤ 6.1.2
- 1.0.0
- 1.0.1
- 1.0.2
- 1.1.0
- 1.1.0
- 1.1.1
- 1.1.2
- 1.1.2
- 1.1.3
- 1.1.3
- 1.1.4
- 1.1.4
- 1.1.5
- 1.1.5
- 2.0
- 2.0.0
- 2.0.0
- 2.0.1
- 2.0.1
- 2.0.2
- 2.0.2
- 2.1
- 2.1
- 2.1.1
- 2.2
- 2.2
- 2.2.1
- 2.2.1
- 3.0
- 3.0
- 3.0.1
- 3.0.1
- 3.1
- 3.1
- 3.1.2
- 3.1.2
- 3.1.3
- 3.1.3
- 3.2
- 3.2
- 3.2.1
- 3.2.1
- 3.2.2
- 4.0
- 4.0
- 4.0.1
- 4.0.1
- 4.0.2
- 4.1
- 4.2.1
- 4.2.5
- 4.2.8
- 4.3.0
- 4.3.1
- 4.3.2
- 4.3.3
- 4.3.5
- 4.3.5
- 4.3.5
- 5.0
- 5.0
- 5.0
- 5.0.1
- 5.0.1
- 5.0.1
- 5.1
- 5.1.1
- 6.0
- 6.0.1
- 6.0.2
- 6.1
Configuration 2
OR
- ≤ 5.2.0
- 1.0.0
- 1.1.0
- 2.0.0
- 2.0.1
- 2.0.2
- 2.1.0
- 2.2.0
- 2.3.0
- 2.3.1
- 2.4.0
- 3.0.0
- 3.0.1
- 3.0.2
- 4.1.0
- 4.1.1
- 4.2.0
- 4.2.1
- 4.2.2
- 4.3.0
- 4.4.0
- 4.4.2
- 4.4.3
- 4.4.4
- 5.0.0
- 5.0.1
- 5.0.2
- 5.1.0
- 5.1.1
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (0)
No CWE recorded.
References (4)
- http://lists.apple.com/archives/security-announce/2013/Mar/msg00004.html vendor-advisoryx_refsource_APPLEVendor Advisory
- http://lists.apple.com/archives/security-announce/2013/Mar/msg00005.html vendor-advisoryx_refsource_APPLEVendor Advisory
- http://support.apple.com/kb/HT5702 x_refsource_CONFIRMVendor Advisory
- http://support.apple.com/kb/HT5704 x_refsource_CONFIRMVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| http://lists.apple.com/archives/security-announce/2013/Mar/msg00004.html | vendor-advisoryx_refsource_APPLEVendor Advisory | |
| http://lists.apple.com/archives/security-announce/2013/Mar/msg00005.html | vendor-advisoryx_refsource_APPLEVendor Advisory | |
| http://support.apple.com/kb/HT5702 | x_refsource_CONFIRMVendor Advisory | |
| http://support.apple.com/kb/HT5704 | x_refsource_CONFIRMVendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner apple
Published Mar 20, 2013
Updated Sep 16, 2024
Reserved Jan 10, 2013
Link CVE-2013-0977
CISA Vulnrichment
Updated n/a