CVE-2014-4388
En bref Sévérité Non disponible EPSS EPSS 1.67 % · centile 77 (2026-10-27) État PUBLISHED Publiée 2014-09-18 Mise à jour 2024-08-06 Attribuée par apple Statut NVD Modified Description IOKit in Apple iOS before 8 and Apple TV before 7 does not properly validate IODataQueue object metadata, which allows attackers to execute arbitrary code in a privileged context via an application that provides crafted values in unspecified metadata fields, a different vulnerability than CVE-2014-4418.
Scores Version Score Vecteur Évalué par CVSS 3.0 HIGH 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H NVD · nvd@nist.gov (Primary) CVSS 2.0 HIGH 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C NVD · nvd@nist.gov (Primary)
Faiblesses (CWE)
Références européennes
Avis du CERT-FR
Configurations affectées (CPE NVD) cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* ≤ 10.9.5cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* ≤ 7.1.2cpe:2.3:o:apple:iphone_os:7.0:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:7.0.1:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:7.0.2:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:7.0.3:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:7.0.4:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:7.0.5:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:7.0.6:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:7.1:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:7.1.1:*:*:*:*:*:*:*cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* ≤ 6.2cpe:2.3:o:apple:tvos:6.0:*:*:*:*:*:*:*cpe:2.3:o:apple:tvos:6.0.1:*:*:*:*:*:*:*cpe:2.3:o:apple:tvos:6.0.2:*:*:*:*:*:*:*cpe:2.3:o:apple:tvos:6.1:*:*:*:*:*:*:*cpe:2.3:o:apple:tvos:6.1.1:*:*:*:*:*:*:*cpe:2.3:o:apple:tvos:6.1.2:*:*:*:*:*:*:*Produits affectés Produit Versions affected n/a
Références
Sources
