CVE-2012-0643

Vulnerability

The kernel in Apple iOS before 5.1 does not properly handle debug system calls. This flaw exists in the kernel itself and is reachable by any crafted program. The affected versions are iOS 5.0 and earlier; the vulnerability is fixed in iOS 5.1 [1].

Exploitation

An attacker can exploit this vulnerability by delivering a crafted program to the target device (e.g., via a malicious app or web page). No special authentication or network position is required beyond the ability to execute the crafted program. The exploitation involves invoking debug system calls that the kernel mishandles, allowing the attacker to bypass sandbox restrictions [1].

Impact

Successful exploitation allows an attacker to break out of the iOS sandbox and execute arbitrary code with kernel-level privileges. This results in a full compromise of confidentiality, integrity, and availability of the device, as the attacker can run arbitrary code outside the sandbox restrictions [1].

Mitigation

Apple released iOS 5.1 on March 7, 2012, which addresses this vulnerability. Users should update their devices to iOS 5.1 or later via the Settings app or iTunes. No workarounds are available for unpatched versions [1].