CVE-2012-3749: Infoleak
First published: Sat Nov 03 2012(Updated: )
The extensions APIs in the kernel in Apple iOS before 6.0.1 provide kernel addresses in responses that contain an OSBundleMachOHeaders key, which makes it easier for remote attackers to bypass the ASLR protection mechanism via a crafted app.
Credit: product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple iPhone OS | <=6.0 | |
| Apple iPhone OS | =1.0.0 | |
| Apple iPhone OS | =1.0.1 | |
| Apple iPhone OS | =1.0.2 | |
| Apple iPhone OS | =1.1.0 | |
| Apple iPhone OS | =1.1.1 | |
| Apple iPhone OS | =1.1.2 | |
| Apple iPhone OS | =1.1.3 | |
| Apple iPhone OS | =1.1.4 | |
| Apple iPhone OS | =1.1.5 | |
| Apple iPhone OS | =2.0 | |
| Apple iPhone OS | =2.0.0 | |
| Apple iPhone OS | =2.0.1 | |
| Apple iPhone OS | =2.0.2 | |
| Apple iPhone OS | =2.1 | |
| Apple iPhone OS | =2.1.1 | |
| Apple iPhone OS | =2.2 | |
| Apple iPhone OS | =2.2.1 | |
| Apple iPhone OS | =3.0 | |
| Apple iPhone OS | =3.0.1 | |
| Apple iPhone OS | =3.1 | |
| Apple iPhone OS | =3.1.2 | |
| Apple iPhone OS | =3.1.3 | |
| Apple iPhone OS | =3.2 | |
| Apple iPhone OS | =3.2.1 | |
| Apple iPhone OS | =3.2.2 | |
| Apple iPhone OS | =4.0 | |
| Apple iPhone OS | =4.0.1 | |
| Apple iPhone OS | =4.0.2 | |
| Apple iPhone OS | =4.1 | |
| Apple iPhone OS | =4.2.1 | |
| Apple iPhone OS | =4.2.5 | |
| Apple iPhone OS | =4.2.8 | |
| Apple iPhone OS | =4.3.0 | |
| Apple iPhone OS | =4.3.1 | |
| Apple iPhone OS | =4.3.2 | |
| Apple iPhone OS | =4.3.3 | |
| Apple iPhone OS | =4.3.5 | |
| Apple iPhone OS | =5.0 | |
| Apple iPhone OS | =5.0.1 | |
| Apple iPhone OS | =5.1.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://archives.neohapsis.com/archives/bugtraq/2012-11/0012.html
- http://lists.apple.com/archives/security-announce/2012/Nov/msg00000.html
- http://lists.apple.com/archives/security-announce/2013/Mar/msg00002.html
- http://secunia.com/advisories/51445
- http://support.apple.com/kb/HT5567
- http://support.apple.com/kb/HT5598
- http://www.securityfocus.com/bid/56361
- collector/nvd-index
- agent/references
- agent/weakness
- agent/author
- agent/severity
- agent/type
- agent/description
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/apple
- canonical/apple iphone os
- version/apple iphone os/6.0
- version/apple iphone os/1.0.0
- version/apple iphone os/1.0.1
- version/apple iphone os/1.0.2
- version/apple iphone os/1.1.0
- version/apple iphone os/1.1.1
- version/apple iphone os/1.1.2
- version/apple iphone os/1.1.3
- version/apple iphone os/1.1.4
- version/apple iphone os/1.1.5
- version/apple iphone os/2.0
- version/apple iphone os/2.0.0
- version/apple iphone os/2.0.1
- version/apple iphone os/2.0.2
- version/apple iphone os/2.1
- version/apple iphone os/2.1.1
- version/apple iphone os/2.2
- version/apple iphone os/2.2.1
- version/apple iphone os/3.0
- version/apple iphone os/3.0.1
- version/apple iphone os/3.1
- version/apple iphone os/3.1.2
- version/apple iphone os/3.1.3
- version/apple iphone os/3.2
- version/apple iphone os/3.2.1
- version/apple iphone os/3.2.2
- version/apple iphone os/4.0
- version/apple iphone os/4.0.1
- version/apple iphone os/4.0.2
- version/apple iphone os/4.1
- version/apple iphone os/4.2.1
- version/apple iphone os/4.2.5
- version/apple iphone os/4.2.8
- version/apple iphone os/4.3.0
- version/apple iphone os/4.3.1
- version/apple iphone os/4.3.2
- version/apple iphone os/4.3.3
- version/apple iphone os/4.3.5
- version/apple iphone os/5.0
- version/apple iphone os/5.0.1
- version/apple iphone os/5.1.1