Lucene search

[email protected]CVE-2014-4378

HistorySep 18, 2014 - 10:55 a.m.

CVE-2014-4378

2014-09-1810:55:09

CWE-119

[email protected]

web.nvd.nist.gov

coregraphics

apple

ios

apple tv

cve-2014-4378

security vulnerability

pdf

remote attack

sensitive information

denial of service

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

5.8 Medium

AI Score

Confidence

Low

0.013 Low

EPSS

Percentile

85.9%

JSON

CoreGraphics in Apple iOS before 8 and Apple TV before 7 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted PDF document.

Affected configurations

NVD

Node

appletvosRange≤6.2

appletvosMatch6.0

appletvosMatch6.0.1

appletvosMatch6.0.2

appletvosMatch6.1

appletvosMatch6.1.1

appletvosMatch6.1.2

Node

appleiphone_osRange≤7.1.2

appleiphone_osMatch7.0

appleiphone_osMatch7.0.1

appleiphone_osMatch7.0.2

appleiphone_osMatch7.0.3

appleiphone_osMatch7.0.4

appleiphone_osMatch7.0.5

appleiphone_osMatch7.0.6

appleiphone_osMatch7.1

appleiphone_osMatch7.1.1

Node

applemac_os_xRange≤10.9.4

CPENameOperatorVersion
apple:tvosapple tvosle6.2
apple:tvosapple tvoseq6.0
apple:tvosapple tvoseq6.0.1
apple:tvosapple tvoseq6.0.2
apple:tvosapple tvoseq6.1
apple:tvosapple tvoseq6.1.1
apple:tvosapple tvoseq6.1.2

CPE	Name	Operator	Version
apple:tvos	apple tvos	le	6.2
apple:tvos	apple tvos	eq	6.0
apple:tvos	apple tvos	eq	6.0.1
apple:tvos	apple tvos	eq	6.0.2
apple:tvos	apple tvos	eq	6.1
apple:tvos	apple tvos	eq	6.1.1
apple:tvos	apple tvos	eq	6.1.2