CVE-2012-0646 — Use of Externally-Controlled Format String in Apple Iphone OS

CWE-134 — Use of Externally-Controlled Format String2 documents2 sources
Severity
9.3CRITICALNVD
EPSS
6.1%
top 9.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apple Iphone OS
Timeline
PublishedMar 8
Latest updateMay 14

Description

Format string vulnerability in VPN in Apple iOS before 5.1 allows remote attackers to execute arbitrary code via a crafted racoon configuration file.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

▶NVDapple/iphone_os< 5.1

🔴Vulnerability Details

1
GHSA
GHSA-pv2r-85qj-vw79: Format string vulnerability in VPN in Apple iOS before 5↗2022-05-14
▶
CVE-2012-0646 — Apple Iphone OS vulnerability | cvebase