CVE-2012-0643 The kernel in Apple iOS before 5.1 does not properly handle debug system calls, which allows remote attackers to bypass sandbox restrictions and execute arbitrary code via a crafted program.
HighCVSS 9.3
EPSS 5.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The kernel in Apple iOS before 5.1 does not properly handle debug system calls, which allows remote attackers to bypass sandbox restrictions and execute arbitrary code via a crafted program.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple iphone os | < 5.1 | 5.1 |
References
- APPLE-SA-2012-03-07-2 mailing-list vendor-advisory
- APPLE-SA-2012-09-19-2 mailing-list vendor-advisory
- 48288 third-party-advisory
- support.apple.com vendor-advisory
- 1026774 third-party-advisory vdb-entry