Apple iOS Code Signing Security Bypass Vulnerability

Bugtraq ID:	50575
Class:	Unknown
CVE:	CVE-2011-3442
Remote:	Yes
Local:	No
Published:	Nov 07 2011 12:00AM
Updated:	Nov 15 2011 12:51AM
Credit:	Charlie Miller
Vulnerable:	Apple iPod Touch 0 Apple iPhone 0 Apple iPad 0 Apple iOS 5 Apple iOS 4.3.5 Apple iOS 4.3.4 Apple iOS 4.3.3 Apple iOS 4.3.2 Apple iOS 4.3.1 Apple iOS 4.3
Not Vulnerable:	Apple iOS 5.0.1

Apple iOS Code Signing Security Bypass Vulnerability

Apple iOS is prone to a security-bypass vulnerability that affects the code signing security feature.

Attackers can exploit this issue by enticing an unsuspecting user to install a specially crafted application on the affected device.

Successful exploits will allow attackers to bypass certain security restrictions and execute arbitrary code on the affected device.

Apple iOS 4.3 through 5.0 are vulnerable.

Apple iOS Code Signing Security Bypass Vulnerability

An attacker must trick a victim into installing a malicious application to exploit this issue.

A video demonstrating the issue is available. This exploit is not otherwise known to be public or circulating in the wild.

Apple iOS Code Signing Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for more information.

Apple iOS Code Signing Security Bypass Vulnerability

References:

• Apple Homepage (Apple)
  
• iPhone Security Bug Lets Innocent-Looking Apps Go Bad (Forbes)