CVE-2011-0227
published 2011-07-19CVE-2011-0227: The queueing primitives in IOMobileFrameBuffer in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 do not properly perform type conversion, which allows local…
PriorityP274high7.2CVSS 2.0
AVLACLAuNCCICAC
ITWVulnCheck KEV
Exploited in the wild
EPSS
0.32%
23.2th percentile
The queueing primitives in IOMobileFrameBuffer in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 do not properly perform type conversion, which allows local users to gain privileges via a crafted application.
Affected
36 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | iphone_os | <= 4.2.8 | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
CVSS provenance
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
vulncheck7.2HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-r27x-693q-vg5j: The queueing primitives in IOMobileFrameBuffer in Apple iOS before 4
ghsa_unreviewed·2022-05-17
CVE-2011-0227 [HIGH] GHSA-r27x-693q-vg5j: The queueing primitives in IOMobileFrameBuffer in Apple iOS before 4
The queueing primitives in IOMobileFrameBuffer in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 do not properly perform type conversion, which allows local users to gain privileges via a crafted application.
VulnCheck
Apple iOS before 4.2.9 and 4.3.x before 4.3.4 IOMobileFrameBuffer Privilege Escalation
vulncheck·2011·CVSS 7.2
CVE-2011-0227 [HIGH] Apple iOS before 4.2.9 and 4.3.x before 4.3.4 IOMobileFrameBuffer Privilege Escalation
Apple iOS before 4.2.9 and 4.3.x before 4.3.4 IOMobileFrameBuffer Privilege Escalation
The queueing primitives in IOMobileFrameBuffer in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 do not properly perform type conversion, which allows local users to gain privileges via a crafted application.
Affected: Apple iphone_os
Required Action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Exploitation References: https://www.trendmicro.com/vinfo/us/threat-encyclopedia/malware/troj_pidief.smxz
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://lists.apple.com/archives/security-announce/2011//Jul/msg00000.htmlhttp://lists.apple.com/archives/security-announce/2011//Jul/msg00001.htmlhttp://support.apple.com/kb/HT4802http://support.apple.com/kb/HT4803http://lists.apple.com/archives/security-announce/2011//Jul/msg00000.htmlhttp://lists.apple.com/archives/security-announce/2011//Jul/msg00001.htmlhttp://support.apple.com/kb/HT4802http://support.apple.com/kb/HT4803
2011-07-19
Published
Exploited in the wild