Vulnerability CVE-2013-5132
Published: 2013-09-07   Modified: 2013-09-08

Description:
Apple AirPort Base Station Firmware before 7.6.4 does not properly handle incorrect frame lengths, which allows remote attackers to cause a denial of service (device crash) by associating with the access point and then sending a short frame.

Type:

CWE-119

 (Improper Restriction of Operations within the Bounds of a Memory Buffer)

CVSS2 => (AV:N/AC:H/Au:N/C:N/I:N/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5.4/10
6.9/10
4.9/10
Exploit range
Attack complexity
Authentication
Remote
High
No required
Confidentiality impact
Integrity impact
Availability impact
None
None
Complete
Affected software
Apple -> Airport base station firmware 

 References:
http://support.apple.com/kb/HT5920
http://lists.apple.com/archives/security-announce/2013/Sep/msg00000.html
Copyright 2024, cxsecurity.com

 

Back to Top