CVE-2013-3950
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2013-3950
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Stack-based buffer overflow in the openSharedCacheFile function in dyld.cpp in dyld in Apple iOS 5.1.x and 6.x through 6.1.3 makes it easier for attackers to conduct untethering attacks via a long string in the DYLD_SHARED_CACHE_DIR environment variable.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Apple iOS ‘openSharedCacheFile’函数基于栈的缓冲区溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Apple iOS是美国苹果（Apple）公司为移动设备所开发的一套操作系统。 Apple iOS 5.1.x版本和6.x至6.1.3版本中的dyld中的dyld.cpp文件中的‘openSharedCacheFile’函数中存在基于栈的缓冲区溢出漏洞。攻击者可通过DYLD_SHARED_CACHE_DIR环境变量中较长的字符串利用该漏洞实施越狱攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2013-3950
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2013-3950
请登录查看更多情报信息。
- http://www.syscan.org/index.php/sg/program/day/2x_refsource_MISC
- http://support.apple.com/kb/HT5934x_refsource_CONFIRM
- http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.htmlvendor-advisoryx_refsource_APPLE
- http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.htmlvendor-advisoryx_refsource_APPLE
- https://nvd.nist.gov/vuln/detail/CVE-2013-3950
Same Patch Batch · n/a · 2013-06-05 · 34 CVEs total
| CVE-2013-2858 | Google Chrome HTML5 Audio实现释放后重用漏洞 | |
| CVE-2013-3955 | Apple iOS XNU内核‘get_xattrinfo’函数拒绝服务漏洞 | |
| CVE-2013-0508 | IBM Tivoli Netcool/System Service Monitor 本地缓冲区溢出漏洞 | |
| CVE-2013-0509 | IBM Tivoli Netcool/System Service Monitor 远程缓冲区溢出漏洞 | |
| CVE-2013-3475 | IBM DB2/DB2 Connect Audit Facility 栈缓冲区溢出漏洞 | |
| CVE-2013-2854 | Google Chrome 拒绝服务漏洞 | |
| CVE-2013-2855 | Google Chrome Developer Tools API拒绝服务漏洞 | |
| CVE-2013-2856 | Google Chrome 释放后重用漏洞 | |
| CVE-2013-2857 | Google Chrome 释放后重用漏洞 | |
| CVE-2013-3954 | Apple Mac OS X XNU内核posix_spawn系统调用拒绝服务漏洞 | |
| CVE-2013-2859 | Google Chrome 安全漏洞 | |
| CVE-2013-2860 | Google Chrome 释放后重用漏洞 | |
| CVE-2013-2861 | Google Chrome SVG实现释放后重用漏洞 | |
| CVE-2013-2862 | Google Chrome Skia拒绝服务漏洞 | |
| CVE-2013-2863 | Google Chrome 任意代码执行漏洞 | |
| CVE-2013-2864 | Google Chrome PDF功能拒绝服务漏洞 | |
| CVE-2013-2865 | Google Chrome 多个安全漏洞 | |
| CVE-2013-0975 | Apple Mac OS X QuickDraw Manager 缓冲区溢出漏洞 | |
| CVE-2013-3953 | Apple Mac OS X ‘mach_port_space_info’函数拒绝服务漏洞 | |
| CVE-2013-3952 | Apple Mac OS X XNU内核 ‘fill_pipeinfo’函数安全漏洞 |
Showing top 20 of 34 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2013-3950
No comments yet