20121101 APPLE-SA-2012-11-01-1 iOS 6.0.1mailing list
http://archives.neohapsis.com/archives/bugtraq/2012-11/0012.html CVE-2012-3748
Apple Safari 6.0.1 for iOS 6.0 / Apple Mac OSX 10.7/8 - Heap Buffer Overflow
Record summary
CVE-2012-3748 has a selected CVSS score of 5.1; EIP currently links 1 catalogued exploit.
Description
Race condition in WebKit in Apple iOS before 6.0.1 and Safari before 6.0.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving JavaScript arrays.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBApple Safari 6.0.1 for iOS 6.0 / Apple Mac OSX 10.7/8 - Heap Buffer OverflowExploitDB exploitby Vitaliy ToropovNot analyzed1 file
References
1220121101 APPLE-SA-2012-11-01-2 Safari 6.0.2mailing list
http://archives.neohapsis.com/archives/bugtraq/2012-11/0013.html APPLE-SA-2012-11-01-1Vendor advisory
http://lists.apple.com/archives/security-announce/2012/Nov/msg00000.html APPLE-SA-2012-11-01-2Vendor advisory
http://lists.apple.com/archives/security-announce/2012/Nov/msg00001.html APPLE-SA-2013-09-12-2Vendor advisory
http://lists.apple.com/archives/security-announce/2013/Sep/msg00003.html 51445Third-party advisory
http://secunia.com/advisories/51445 support.apple.comConfirmation
http://support.apple.com/kb/HT5567 support.apple.comConfirmation
http://support.apple.com/kb/HT5568 support.apple.comConfirmation
http://support.apple.com/kb/HT5598 support.apple.comConfirmation
http://support.apple.com/kb/HT5921 56362vdb entry
http://www.securityfocus.com/bid/56362 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2012-3748