Apple iOS CVE-2013-3950 Stack Based Buffer Overflow Vulnerability

Bugtraq ID:	60437
Class:	Boundary Condition Error
CVE:	CVE-2013-3950
Remote:	Yes
Local:	No
Published:	Apr 26 2013 12:00AM
Updated:	Mar 19 2015 08:09AM
Credit:	Stefan Esser
Vulnerable:	Apple iPod Touch 0 Apple iPhone 0 Apple iPad 0 Apple iOS 5.1.1 Apple iOS 5.1 Apple Apple TV 5.0
Not Vulnerable:

Apple iOS CVE-2013-3950 Stack Based Buffer Overflow Vulnerability

Apple iOS is prone to a stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized buffer.

Successful exploits may allow an attacker to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions.

Apple iOS 5.1.x and 6.x through 6.1.3 are vulnerable.

Apple iOS CVE-2013-3950 Stack Based Buffer Overflow Vulnerability

The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.

Apple iOS CVE-2013-3950 Stack Based Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Apple iOS CVE-2013-3950 Stack Based Buffer Overflow Vulnerability

References:

• Apple iOS Homepage (Apple)