ID:1195 - Exploit for Race condition in Apple iOS - CVE-2017-2501

 
Main Vulnerability Database Exploits ID:1195 - Exploit for Race condition in Apple iOS - CVE-2017-2501

ID:1195 - Exploit for Race condition in Apple iOS - CVE-2017-2501

Published: March 18, 2020


Vulnerability identifier: #VU6578
Vulnerability risk: Low
CVE-ID: CVE-2017-2501
CWE-ID: CWE-362
Exploitation vector: Local access
Vulnerable software:
Apple iOS

Link to public exploit:


Vulnerability description

The vulnerability allows a local attacker to execute arbitrary code on the target system.

The weakness exists due to race condition in kernel when processing a malicious application. A local attacker can run a specially crafted application to execute arbitrary code with root privileges.

Successful exploitation of the vulnerability may result in system compromise.

Remediation

Update to version 10.3.2.