PT-2013-5391
CVE-2013-5145
·
Published
2013-09-19
·
Updated
2013-10-31
Description by
CVSS 2.0
6.3
MediumMetricsAV:L/AC:M/Au:N/C:N/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Apple iOS versions prior to 7
Description
The issue concerns the kextd in Kext Management, which does not properly verify authorization for IPC messages. This allows local users to load or unload kernel extensions via a crafted message.
Recommendations
For versions prior to 7, update to version 7 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾