The kernel in Apple iOS before 5.0.1 does not ensure the validity of flag combinations for an mmap system call, which allows local users to execute arbitrary unsigned code via a crafted app.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Iphone_os | Apple | 4.3.0 (including) | 4.3.0 (including) |
| Iphone_os | Apple | 4.3.1 (including) | 4.3.1 (including) |
| Iphone_os | Apple | 4.3.2 (including) | 4.3.2 (including) |
| Iphone_os | Apple | 4.3.3 (including) | 4.3.3 (including) |
| Iphone_os | Apple | 4.3.4 (including) | 4.3.4 (including) |
| Iphone_os | Apple | 4.3.5 (including) | 4.3.5 (including) |
| Iphone_os | Apple | 5.0 (including) | 5.0 (including) |