CVE-2012-3749
Estado: ModificadaMedia (5)—
Las APIs de las extensiones del kernel en Apple iOS antes de v6.0.1 devuelve direcciones del kernel en las respuestas que contienen una clave OSBundleMachOHeaders, lo que hace que sea más fácil para los atacantes remotos evitar el mecanismo de protección ASLR través de una aplicación creada paar este fin.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
- Puntuación base: 5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 2.23%
- Percentil entre todas las CVEs puntuadas: 82
- Fecha de la puntuación: 15/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-200
Referencias
- http://archives.neohapsis.com/archives/bugtraq/2012-11/0012.html
- http://lists.apple.com/archives/security-announce/2012/Nov/msg00000.html
- http://lists.apple.com/archives/security-announce/2013/Mar/msg00002.html
- http://secunia.com/advisories/51445
- http://support.apple.com/kb/HT5567
- http://support.apple.com/kb/HT5598
- http://www.securityfocus.com/bid/56361
- http://archives.neohapsis.com/archives/bugtraq/2012-11/0012.html
- http://lists.apple.com/archives/security-announce/2012/Nov/msg00000.html
- http://lists.apple.com/archives/security-announce/2013/Mar/msg00002.html
- http://secunia.com/advisories/51445
- http://support.apple.com/kb/HT5567
- http://support.apple.com/kb/HT5598
- http://www.securityfocus.com/bid/56361
JSON original (NVD)
Mostrar
{
"id": "CVE-2012-3749",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "product-security@apple.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2012-11-03T17:55:01.797",
"references": [
{
"url": "http://archives.neohapsis.com/archives/bugtraq/2012-11/0012.html",
"source": "product-security@apple.com"
},
{
"url": "http://lists.apple.com/archives/security-announce/2012/Nov/msg00000.html",
"tags": [
"Vendor Advisory"
],
"source": "product-security@apple.com"
},
{
"url": "http://lists.apple.com/archives/security-announce/2013/Mar/msg00002.html",
"source": "product-security@apple.com"
},
{
"url": "http://secunia.com/advisories/51445",
"source": "product-security@apple.com"
},
{
"url": "http://support.apple.com/kb/HT5567",
"tags": [
"Vendor Advisory"
],
"source": "product-security@apple.com"
},
{
"url": "http://support.apple.com/kb/HT5598",
"source": "product-security@apple.com"
},
{
"url": "http://www.securityfocus.com/bid/56361",
"source": "product-security@apple.com"
},
{
"url": "http://archives.neohapsis.com/archives/bugtraq/2012-11/0012.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.apple.com/archives/security-announce/2012/Nov/msg00000.html",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.apple.com/archives/security-announce/2013/Mar/msg00002.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/51445",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://support.apple.com/kb/HT5567",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://support.apple.com/kb/HT5598",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/56361",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The extensions APIs in the kernel in Apple iOS before 6.0.1 provide kernel addresses in responses that contain an OSBundleMachOHeaders key, which makes it easier for remote attackers to bypass the ASLR protection mechanism via a crafted app."
},
{
"lang": "es",
"value": "Las APIs de las extensiones del kernel en Apple iOS antes de v6.0.1 devuelve direcciones del kernel en las respuestas que contienen una clave OSBundleMachOHeaders, lo que hace que sea más fácil para los atacantes remotos evitar el mecanismo de protección ASLR través de una aplicación creada paar este fin."
}
],
"lastModified": "2026-06-16T23:43:51.677",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7AE44762-0BFC-488D-921F-9DF3AA3FC71A",
"versionEndIncluding": "6.0"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E28FB0CB-D636-4F85-B5F7-70EC30053925"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "27319629-171F-42AA-A95F-2D71F78097D0"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "297F9438-0F04-4128-94A8-A504B600929E"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F8618621-F871-4531-9F6C-7D60F2BF8B75"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "824DED2D-FA1D-46FC-8252-6E25546DAE29"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DF40CDA4-4716-4815-9ED0-093FE266734C"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "25A5D868-0016-44AB-80E6-E5DF91F15455"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "863383DA-0BC6-4A96-835A-A96128EC0202"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2CFF5BE7-2BF6-48CE-B74B-B1A05383C10F"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "51D3BE2B-5A01-4AD4-A436-0056B50A535D"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:3.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9A20F171-79FE-43B9-8309-B18341639FA1"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:3.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "126EF22D-29BC-4366-97BC-B261311E6251"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3B3DD7B3-DA4C-4B0A-A94E-6BF66B358B7D"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:3.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3A939B80-0AD0-48AF-81A7-370716F56639"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:3.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D28528CE-4943-4F82-80C0-A629DA3E6702"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "12E22AF0-2B66-425A-A1EE-4F0E3B0433E7"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:4.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BB34ECBE-33E8-40E1-936B-7800D2525AE6"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:4.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "107C59BE-D8CF-4A17-8DFB-BED2AB12388D"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "36C86BB9-0328-4E34-BC2B-47B3471EC262"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:4.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A54A8681-2D8A-4B0B-A947-82F3CE1FB03C"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:4.2.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E0070D83-2E27-4DA8-8D10-A6A697216F36"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:4.2.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8C9ACA63-4528-4090-B1EA-1FE57A6B0555"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:4.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7252935C-E421-4339-B61F-0299E28888DA"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:4.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9DD342BF-096A-4082-B700-19629F2BDE87"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:4.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "93141AB6-26F2-4C6D-95B3-D383EABB4034"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:4.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4D5C61FF-7CD3-410A-94F2-5DE701466B1F"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:4.3.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "28A01C87-B02A-4239-8340-B396D0E6B21C"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "06980521-B0EA-434D-89AD-A951EAF1D23F"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:5.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A3AE6A93-3977-4B32-B2F6-55C94387DDE3"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:5.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A0A4AF71-8E71-432A-B908-361DAF99F4B9"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "product-security@apple.com"
}