Lucene search

K
cve[email protected]CVE-2014-1320
HistoryApr 23, 2014 - 11:52 a.m.

CVE-2014-1320

2014-04-2311:52:00
CWE-200
web.nvd.nist.gov
26
iokit
apple
ios
os x
apple tv
cve-2014-1320
aslr
local users
security vulnerability
nvd

5.6 Medium

AI Score

Confidence

Low

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:N/A:N

0.03 Low

EPSS

Percentile

90.8%

IOKit in Apple iOS before 7.1.1, Apple OS X through 10.9.2, and Apple TV before 6.1.1 places kernel pointers into an object data structure, which makes it easier for local users to bypass the ASLR protection mechanism by reading unspecified attributes of the object.

5.6 Medium

AI Score

Confidence

Low

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:N/A:N

0.03 Low

EPSS

Percentile

90.8%