CVE-2013-5133

high

Published 2014-03-14 · Modified 2026-05-06

CVSS v3

—

CVSS v2

8.8

VIR risk

8.8

Description

Backup in Apple iOS before 7.1 does not properly restrict symlinks, which allows remote attackers to overwrite files during a restore operation via crafted backup data.

Predictions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: product-security@apple.com — http://support.apple.com/kb/HT6162

OS impact

OS	Version	Status
macos		affected
macos	7.0	affected
macos	7.0.1	affected
macos	7.0.2	affected
macos	7.0.3	affected
macos	7.0.4	affected
macos	7.0.5	affected

References

http://support.apple.com/kb/HT6162
http://support.apple.com/kb/HT6162

CWEs

CWE-264

Verify integrity in audit chain (admin only). AS-IS.