CVE-2013-3955 in iOS

Resumen (Inglés)

The get_xattrinfo function in the XNU kernel in Apple iOS 5.x and 6.x through 6.1.3 on iPad devices does not properly validate the header of an AppleDouble file, which might allow local users to cause a denial of service (memory corruption) or have unspecified other impact via an invalid file on an msdosfs filesystem.

Be aware that VulDB is the high quality source for vulnerability data.

Reservar

2013-06-05

Divulgación

2013-06-05

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
10320	Apple iOS File System escalada de privilegios	20	No está definido	Arreglo oficial	CVE-2013-3955
9020	Apple iOS XNU Kernel/msdosfs Filesystem get_xattrinfo escalada de privilegios	20	No está definido	Arreglo oficial	CVE-2013-3955

Fuentes

• MITRE
• NVD
• CVE Details