Vulnerability in Apple Iphone OS
CVE-2011-3442
The kernel in Apple iOS before 5.0.1 does not ensure the validity of flag combinations for an mmap system call, which allows local users to execute arbitrary unsigned code via a crafted app.
EPSS: 0.004 (28.2th percentile) — read the EPSS interpretation.
Affected products
- Apple Iphone_os — versions 4.3.0, 4.3.1, 4.3.2
- N/a — versions n/a
Weakness classification (CWE)
References
- product-security@apple.com (vdb-entry, x_refsource_SECTRACK)
- product-security@apple.com (vendor-advisory, x_refsource_APPLE, Vendor Advisory)
- product-security@apple.com (x_refsource_CONFIRM, Vendor Advisory)