CVE-2013-3951

Name of the Vulnerable Software and Affected Versions libc in Apple iOS versions 6.1.3 libc in Apple Mac OS X versions 10.8.x

Description The issue allows local users to bypass cookie randomization by executing a program with a call-path beginning with the stack-guard= substring. This can be demonstrated by an iOS untethering attack or an attack against a setuid Mac OS X program.

Recommendations For Apple iOS version 6.1.3, update to a newer version that contains a fix for this issue. For Apple Mac OS X version 10.8.x, update to a newer version that contains a fix for this issue.