CVE-2013-3955

Currently unrated

Key Information:

Vendor
Apple
Status
iPhone OS
Ipad
Ipad Mini
Ipad2
Vendor
CVE Published:
5 June 2013

Summary

The get_xattrinfo function in the XNU kernel in Apple iOS 5.x and 6.x through 6.1.3 on iPad devices does not properly validate the header of an AppleDouble file, which might allow local users to cause a denial of service (memory corruption) or have unspecified other impact via an invalid file on an msdosfs filesystem.

References

http://www.syscan.org/index.php/sg/program/day/2
x_refsource_MISC
http://www.securitytracker.com/id/1029054
vdb-entryx_refsource_SECTRACK
http://antid0te.com/syscan_2013/SyScan2013_Mountain_Lion_...
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.