Lucene search

K
cve[email protected]CVE-2014-1276
HistoryMar 14, 2014 - 10:55 a.m.

CVE-2014-1276

2014-03-1410:55:06
CWE-264
web.nvd.nist.gov
19
cve-2014-1276
iokit
apple ios
user-action monitoring
arbitrary apps
crafted app

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

5.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

57.8%

IOKit HID Event in Apple iOS before 7.1 allows attackers to conduct user-action monitoring attacks against arbitrary apps via a crafted app that accesses an IOKit framework interface.

Affected configurations

NVD
Node
appleiphone_osRange≀7.0.6
OR
appleiphone_osMatch7.0
OR
appleiphone_osMatch7.0.1
OR
appleiphone_osMatch7.0.2
OR
appleiphone_osMatch7.0.3
OR
appleiphone_osMatch7.0.4
OR
appleiphone_osMatch7.0.5

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

5.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

57.8%