CVE-2012-3728

MediumCVSS 6.9/10Last modified Jun 16, 2026

Description

The kernel in Apple iOS before 6 dereferences invalid pointers during the handling of packet-filter data structures, which allows local users to gain privileges via a crafted program that makes packet-filter ioctl calls.

Metrics

CVSS 2.0 6.9/10AV:L/AC:M/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-264

Affected software

No affected versions have been published.

Timeline

Published
Sep 20, 2012
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2012

CVE-2012-37291.9The Berkeley Packet Filter (BPF) interpreter implementation in the kernel in Apple iOS before 6 accesses uninitialized memory locations, whiCVE-2012-37304.3Mail in Apple iOS before 6 does not properly handle reuse of Content-ID header values, which allows remote attackers to spoof attachments viCVE-2012-37312.1Mail in Apple iOS before 6 does not properly implement the Data Protection feature for e-mail attachments, which allows physically proximateCVE-2012-37326.4Mail in Apple iOS before 6 uses an S/MIME message's From address as the displayed sender address, which allows remote attackers to spoof sigCVE-2012-37334.3Messages in Apple iOS before 6, when multiple iMessage e-mail addresses are configured, does not ensure that a reply's sender address matcheCVE-2012-37341.9Office Viewer in Apple iOS before 6 writes cleartext document data to a temporary file, which might allow local users to bypass a document'sCVE-2012-37352.1The Passcode Lock implementation in Apple iOS before 6 does not properly interact with the "Slide to Power Off" feature, which allows physicCVE-2012-37364.6The Passcode Lock implementation in Apple iOS before 6 allows physically proximate attackers to bypass an intended passcode requirement via CVE-2012-37372.1The Passcode Lock implementation in Apple iOS before 6 does not properly restrict photo viewing, which allows physically proximate attackersCVE-2012-37383.6The Emergency Dialer screen in the Passcode Lock implementation in Apple iOS before 6 does not properly limit the dialing methods, which allCVE-2012-37392.1The Passcode Lock implementation in Apple iOS before 6 allows physically proximate attackers to bypass an intended passcode requirement via CVE-2012-37402.1The Passcode Lock implementation in Apple iOS before 6 does not properly manage the lock state, which allows physically proximate attackers
CVE-2012-3728: Medium severity, CVSS 6.9 | Vulnix