CVE-2013-0981

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

The IOUSBDeviceFamily driver in the USB implementation in the kernel in Apple iOS before 6.1.3 and Apple TV before 5.2.1 accesses pipe object pointers that originated in userspace, which allows local users to gain privileges via crafted code.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.apple.com/archives/security-announce/2013/Mar/msg00004.htmlVendor Advisory
http://lists.apple.com/archives/security-announce/2013/Mar/msg00005.htmlVendor Advisory
http://support.apple.com/kb/HT5702Vendor Advisory
http://support.apple.com/kb/HT5704Vendor Advisory
http://lists.apple.com/archives/security-announce/2013/Mar/msg00004.htmlVendor Advisory
http://lists.apple.com/archives/security-announce/2013/Mar/msg00005.htmlVendor Advisory
http://support.apple.com/kb/HT5702Vendor Advisory
http://support.apple.com/kb/HT5704Vendor Advisory

Timeline

Published: Mar 20, 2013
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-09821.7The Private Browsing feature in CFNetwork in Apple Mac OS X before 10.8.4 does not prevent storage of permanent cookies upon exit from Safar CVE-2013-09836.8Stack consumption vulnerability in CoreAnimation in Apple Mac OS X before 10.8.4 allows remote attackers to execute arbitrary code or cause CVE-2013-09849.3Directory Service in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (daemon cr CVE-2013-09852.1Disk Management in Apple Mac OS X before 10.8.4 does not properly authenticate attempts to disable FileVault, which allows local users to ca CVE-2013-09869.3Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application CVE-2013-09879.3Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafte CVE-2013-09889.3Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application CVE-2013-09899.3Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application CVE-2013-09904.9SMB in Apple Mac OS X before 10.8.4, when file sharing is enabled, allows remote authenticated users to create or modify files outside of a CVE-2013-09916.8WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (me CVE-2013-09926.8WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (me CVE-2013-09936.8WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (me