- iPhoneRoot.com - https://iphoneroot.com -
Apple fixed in iOS 6.1.3 four security issues used in Evasi0n
Posted By admin On March 20, 2013 @ 12:32 am In All,Firmware,Software,Unlock & Jailbreak | Comments Disabled
Apple has acknowledged the evad3rs for discovery of four of the six security issues fixed in iOS 6.1.3 [2], notes MuscleNerd.
Apple gives hat tip to @evad3rs for 4 of the 6 security fixes in 6.1.3
![]()
dyld
Available for: iPhone 3GS and later, iPod touch (4th generation) and later, iPad 2 and later
Impact: A local user may be able to execute unsigned code
Description: A state management issue existed in the handling of Mach-O executable files with overlapping segments. This issue was addressed by refusing to load an executable with overlapping segments.
CVE-ID : CVE-2013-0977 : evad3rs
Kernel
Available for: iPhone 3GS and later, iPod touch (4th generation) and later, iPad 2 and later
Impact: A local user may be able to determine the address of structures in the kernel
Description: An information disclosure issue existed in the ARM prefetch abort handler. This issue was addressed by panicking if the prefetch abort handler is not being called from an abort context.
CVE-ID : CVE-2013-0978 : evad3rs
Lockdown
Available for: iPhone 3GS and later, iPod touch (4th generation) and later, iPad 2 and later
Impact: A local user may be able to change permissions on arbitrary files
Description: When restoring from backup, lockdownd changed permissions on certain files even if the path to the file included a symbolic link. This issue was addressed by not changing permissions on any file with a symlink in its path.
CVE-ID : CVE-2013-0979 : evad3rs
USB
Available for: iPhone 3GS and later, iPod touch (4th generation) and later, iPad 2 and later
Impact: A local user may be able to execute arbitrary code in the kernel
Description: The IOUSBDeviceFamily driver used pipe object pointers that came from userspace. This issue was addressed by performing additional validation of pipe object pointers.
CVE-ID : CVE-2013-0981 : evad3rs
Article printed from iPhoneRoot.com: https://iphoneroot.com
URL to article: https://iphoneroot.com/apple-fixed-in-ios-6-1-3-four-security-issues-used-in-evasi0n/
URLs in this post:
[1] Image: https://iphoneroot.com/wp-content/uploads/2013/03/evasi0n-icon-evad3rs-220x220.png
[2] iOS 6.1.3: https://iphoneroot.com/apple-releases-ios-6-1-3-with-evasi0n-fix/
[3] http://is.gd/nfspim: http://is.gd/nfspim
Click here to print.
Copyright © 2008-2015 iPhoneRoot.com. All rights reserved.