CVE - CVE-2013-0964

CVE-ID
CVE-2013-0964	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The kernel in Apple iOS before 6.1 and Apple TV before 5.2 does not properly validate copyin and copyout arguments, which allows local users to bypass intended pointer restrictions and access locations in the first kernel-memory page by specifying a length of less than one page.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
APPLE:APPLE-SA-2013-01-28-1 URL:http://lists.apple.com/archives/security-announce/2013/Jan/msg00000.html APPLE:APPLE-SA-2013-01-28-2 URL:http://lists.apple.com/archives/security-announce/2013/Jan/msg00001.html BID:57595 URL:http://www.securityfocus.com/bid/57595 CONFIRM:http://support.apple.com/kb/HT5642 CONFIRM:http://support.apple.com/kb/HT5643 OSVDB:89659 URL:~~http://osvdb.org/89659~~ (Obsolete source)
Assigning CNA
Apple Inc.
Date Record Created
20130110	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20130110)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)