CVE-2013-3955 | BDVDB-2026-56064 Detail

Description#

The get_xattrinfo function in the XNU kernel in Apple iOS 5.x and 6.x through 6.1.3 on iPad devices does not properly validate the header of an AppleDouble file, which might allow local users to cause a denial of service (memory corruption) or have unspecified other impact via an invalid file on an msdosfs filesystem.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.syscan.org/index.php/sg/program/day/2
http://www.securitytracker.com/id/1029054
http://antid0te.com/syscan_2013/SyScan2013_Mountain_Lion_iOS_Vulnerabilities_Garage_Sale_Whitepaper.pdf
http://support.apple.com/kb/HT5934
http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html

Exploit#

No public exploit known

History#

Version 12013-06-05Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.