Lucene search
HistoryMay 18, 2014 - 11:12 a.m.
CVE-2014-1347
cve-2014-1347
apple itunes
os x
permissions
local users
file modification
6 Medium
AI Score
Confidence
Low
4.4 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.2%
Apple iTunes before 11.2.1 on OS X sets world-writable permissions for /Users and /Users/Shared during reboots, which allows local users to modify files, and consequently obtain access to arbitrary user accounts, via standard filesystem operations.
References
Related
nessus
nessus
prion
prion
Code injection
2014-05-18 11:12:00
openvas
openvas
securityvulns
securityvulns
APPLE-SA-2014-05-16-1 iTunes 11.2.1
2014-05-29 00:00:00
iTunes security vulnerabilities
2014-05-29 00:00:00
kaspersky
kaspersky
KLA10077 WLF vulnerability in Apple iTunes
2014-05-18 00:00:00
cvelist
cvelist
CVE-2014-1347
2014-05-18 10:00:00
6 Medium
AI Score
Confidence
Low
4.4 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.2%
Related for CVE-2014-1347