CVE-2013-0977: Medium severity iPhone OS vulnerability
Published Mar 20, 2013
·Updated
dyld in Apple iOS before 6.1.3 and Apple TV before 5.2.1 does not properly manage the state of file loading for Mach-O executable files, which allows local users to bypass intended code-signing requirements via a file that contains overlapping segments.
Affected Software
101 affected components
iPhone OS<=6.1.2
iPhone OS=1.0.0
iPhone OS=1.0.1
iPhone OS=1.0.2
iPhone OS=1.1.0
iPhone OS=1.1.0
iPhone OS=1.1.1
iPhone OS=1.1.2
iPhone OS=1.1.2
iPhone OS=1.1.3
iPhone OS=1.1.3
iPhone OS=1.1.4
iPhone OS=1.1.4
iPhone OS=1.1.5
iPhone OS=1.1.5
iPhone OS=2.0
iPhone OS=2.0.0
iPhone OS=2.0.0
iPhone OS=2.0.1
iPhone OS=2.0.1
iPhone OS=2.0.2
iPhone OS=2.0.2
iPhone OS=2.1
iPhone OS=2.1
iPhone OS=2.1.1
iPhone OS=2.2
iPhone OS=2.2
iPhone OS=2.2.1
iPhone OS=2.2.1
iPhone OS=3.0
iPhone OS=3.0
iPhone OS=3.0.1
iPhone OS=3.0.1
iPhone OS=3.1
iPhone OS=3.1
iPhone OS=3.1.2
iPhone OS=3.1.2
iPhone OS=3.1.3
iPhone OS=3.1.3
iPhone OS=3.2
iPhone OS=3.2
iPhone OS=3.2.1
iPhone OS=3.2.1
iPhone OS=3.2.2
iPhone OS=4.0
iPhone OS=4.0
iPhone OS=4.0.1
iPhone OS=4.0.1
iPhone OS=4.0.2
iPhone OS=4.1
iPhone OS=4.2.1
iPhone OS=4.2.5
iPhone OS=4.2.8
iPhone OS=4.3.0
iPhone OS=4.3.1
iPhone OS=4.3.2
iPhone OS=4.3.3
iPhone OS=4.3.5
iPhone OS=4.3.5
iPhone OS=4.3.5
iPhone OS=5.0
iPhone OS=5.0
iPhone OS=5.0
iPhone OS=5.0.1
iPhone OS=5.0.1
iPhone OS=5.0.1
iPhone OS=5.1
iPhone OS=5.1.1
iPhone OS=6.0
iPhone OS=6.0.1
iPhone OS=6.0.2
iPhone OS=6.1
tvOS<=5.2.0
tvOS=1.0.0
tvOS=1.1.0
tvOS=2.0.0
tvOS=2.0.1
tvOS=2.0.2
tvOS=2.1.0
tvOS=2.2.0
tvOS=2.3.0
tvOS=2.3.1
tvOS=2.4.0
tvOS=3.0.0
tvOS=3.0.1
tvOS=3.0.2
tvOS=4.1.0
tvOS=4.1.1
tvOS=4.2.0
tvOS=4.2.1
tvOS=4.2.2
tvOS=4.3.0
tvOS=4.4.0
tvOS=4.4.2
tvOS=4.4.3
tvOS=4.4.4
tvOS=5.0.0
tvOS=5.0.1
tvOS=5.0.2
tvOS=5.1.0
tvOS=5.1.1
Event History
Mar 20, 2013
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-0977?
CVE-2013-0977 is considered a medium severity vulnerability that allows local users to bypass code-signing requirements.
2
How do I fix CVE-2013-0977?
To fix CVE-2013-0977, update your Apple iOS to version 6.1.3 or later, or Apple TV to version 5.2.1 or later.
3
What versions of Apple iOS are affected by CVE-2013-0977?
CVE-2013-0977 affects Apple iOS versions before 6.1.3.
4
What devices are impacted by CVE-2013-0977?
CVE-2013-0977 impacts all devices running affected versions of Apple iOS and Apple TV software.
5
Is CVE-2013-0977 exploitable remotely?
CVE-2013-0977 is not remotely exploitable; it requires local user access to the affected device.