« Back to list

CVE-2011-3442

Status: ModifiedHigh (7.2)—

The kernel in Apple iOS before 5.0.1 does not ensure the validity of flag combinations for an mmap system call, which allows local users to execute arbitrary unsigned code via a crafted app.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

Apple — Iphone OS

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2011-3442",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.2,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "product-security@apple.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-11-11T18:55:01.333",
  "references": [
    {
      "url": "http://lists.apple.com/archives/Security-announce/2011/Nov/msg00001.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "product-security@apple.com"
    },
    {
      "url": "http://support.apple.com/kb/HT5052",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "product-security@apple.com"
    },
    {
      "url": "http://www.securitytracker.com/id?1026287",
      "source": "product-security@apple.com"
    },
    {
      "url": "http://lists.apple.com/archives/Security-announce/2011/Nov/msg00001.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://support.apple.com/kb/HT5052",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1026287",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The kernel in Apple iOS before 5.0.1 does not ensure the validity of flag combinations for an mmap system call, which allows local users to execute arbitrary unsigned code via a crafted app."
    },
    {
      "lang": "es",
      "value": "El kernel en Apple iOS anterior a v5.0.1 no asegura la validez de las combinaciones de indicadores de una llamada al sistema mmap, lo que permite a usuarios locales ejecutar código arbitrario sin firmar  a través de una aplicación manipulada."
    }
  ],
  "lastModified": "2026-06-16T23:33:17.913",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:4.3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7252935C-E421-4339-B61F-0299E28888DA"
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:4.3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9DD342BF-096A-4082-B700-19629F2BDE87"
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:4.3.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "93141AB6-26F2-4C6D-95B3-D383EABB4034"
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:4.3.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4D5C61FF-7CD3-410A-94F2-5DE701466B1F"
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:4.3.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EF21ABCB-7CAC-467F-A6B6-06AC2E5CB5EE"
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:4.3.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "28A01C87-B02A-4239-8340-B396D0E6B21C"
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:4.3.5:-:ipad:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "396634C5-774C-4131-B927-3CAD239EF0B3"
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:4.3.5:-:ipodtouch:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "64FF0F29-B3C2-4BDC-89FF-DBEDE87D64A4"
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "06980521-B0EA-434D-89AD-A951EAF1D23F"
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:5.0:-:ipad:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "10A0C8B7-D7E0-4CE7-AB4D-FE7AD74B8E67"
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:5.0:-:iphone:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7313FB15-4EF4-4775-BBE3-B46E803BE5A6"
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:5.0:-:ipodtouch:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E643CBB2-E0B3-4E5A-B99D-A15D6874A52B"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "evaluatorImpact": "Per: http://support.apple.com/kb/HT5052\r\n\r\n'This issue does not affect devices running iOS prior to version 4.3.'",
  "sourceIdentifier": "product-security@apple.com"
}