Apple iOS User Space Stack Cookies CVE-2013-3951 Local Security Bypass Vulnerability

Bugtraq ID:	60440
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2013-3951
Remote:	No
Local:	Yes
Published:	Apr 26 2013 12:00AM
Updated:	Nov 03 2015 07:45PM
Credit:	Stefan Esser
Vulnerable:	Apple iOS 4.2.1 Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 3.2.2 Apple iOS 3.2.1 Apple iOS 5.1.1 Apple iOS 5.1 Apple iOS 5.0.1 Apple iOS 5 Apple iOS 4.3.5 Apple iOS 4.3.4 Apple iOS 4.3 Apple iOS 4.2.9 Apple iOS 4.2.8 Apple iOS 4.2.7 Apple iOS 4.2.6 Apple iOS 4.2.5 Apple iOS 4.2.10 Apple iOS 4.2 Apple iOS 4.1 Apple iOS 4 Apple iOS 3.2 Apple iOS 3.1 Apple iOS 3.0 Apple iOS 2.1 Apple iOS 2.0
Not Vulnerable:

Apple iOS User Space Stack Cookies CVE-2013-3951 Local Security Bypass Vulnerability

Apple iOS is prone to a local security-bypass vulnerability that affects the User Space Stack Cookies implementation.

Local attacker can exploit this issue bypass security restrictions and perform unauthorized actions.

Apple iOS User Space Stack Cookies CVE-2013-3951 Local Security Bypass Vulnerability

The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.

Apple iOS User Space Stack Cookies CVE-2013-3951 Local Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Apple iOS User Space Stack Cookies CVE-2013-3951 Local Security Bypass Vulnerability

References:

• Apple Homepage (Apple)
  
• Apple iOS Homepage (Apple)