CVE-2013-0977

dyld in Apple iOS before 6.1.3 and Apple TV before 5.2.1 does not properly manage the state of file loading for Mach-O executable files, which allows local users to bypass intended code-signing requirements via a file that contains overlapping segments.

Score

CVSS 2.0 4.6 Medium

Status

Modified - product-security@apple.com

Published

2013-03-20

Last modified

2024-09-16

Affected products

• Iphone Os (Apple)
• Tvos (Apple)

References

• http://lists.apple.com/archives/security-announce/2013/Mar/msg00004.html
• http://lists.apple.com/archives/security-announce/2013/Mar/msg00005.html
• http://support.apple.com/kb/HT5702
• http://support.apple.com/kb/HT5704