CVE-2014-4375
En bref Sévérité Non disponible EPSS EPSS 0.36 % · centile 30 (2026-10-27) État PUBLISHED Publiée 2014-09-18 Mise à jour 2024-08-06 Attribuée par apple Statut NVD Modified Description Double free vulnerability in Apple iOS before 8 and Apple TV before 7 allows local users to gain privileges or cause a denial of service (device crash) via vectors related to Mach ports.
Scores Version Score Vecteur Évalué par CVSS 3.0 HIGH 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H NVD · nvd@nist.gov (Primary) CVSS 2.0 HIGH 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C NVD · nvd@nist.gov (Primary)
Références européennes
Avis du CERT-FR
Configurations affectées (CPE NVD) cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* ≤ 10.9.5cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* ≤ 6.2cpe:2.3:o:apple:tvos:6.0:*:*:*:*:*:*:*cpe:2.3:o:apple:tvos:6.0.1:*:*:*:*:*:*:*cpe:2.3:o:apple:tvos:6.0.2:*:*:*:*:*:*:*cpe:2.3:o:apple:tvos:6.1:*:*:*:*:*:*:*cpe:2.3:o:apple:tvos:6.1.1:*:*:*:*:*:*:*cpe:2.3:o:apple:tvos:6.1.2:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* ≤ 7.1.2cpe:2.3:o:apple:iphone_os:7.0:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:7.0.1:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:7.0.2:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:7.0.3:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:7.0.4:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:7.0.5:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:7.0.6:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:7.1:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:7.1.1:*:*:*:*:*:*:*Produits affectés Produit Versions affected n/a
Références
Sources
