Lucene search

[email protected]CVE-2014-4461

HistoryNov 18, 2014 - 11:59 a.m.

CVE-2014-4461

2014-11-1811:59:08

CWE-20

[email protected]

web.nvd.nist.gov

apple

ios

apple tv

kernel

vulnerability

arbitrary code execution

nvd

cve-2014-4461

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

4.2 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

67.8%

JSON

The kernel in Apple iOS before 8.1.1 and Apple TV before 7.0.2 does not properly validate IOSharedDataQueue object metadata, which allows attackers to execute arbitrary code in a privileged context via a crafted application.

Affected configurations

NVD

Node

appleiphone_osRange≤8.1

appleiphone_osMatch8.0

appleiphone_osMatch8.0.1

appleiphone_osMatch8.0.2

Node

applemac_os_xRange≤10.10.1

applemac_os_xMatch10.8.5

applemac_os_xMatch10.9.5

applemac_os_xMatch10.10.0

Node

appletvosRange≤7.0.1

appletvosMatch6.0

appletvosMatch6.0.1

appletvosMatch6.0.2

appletvosMatch6.1

appletvosMatch6.1.1

appletvosMatch6.1.2

appletvosMatch6.2

appletvosMatch6.2.1

appletvosMatch7.0

CPENameOperatorVersion
apple:iphone_osapple iphone osle8.1
apple:iphone_osapple iphone oseq8.0
apple:iphone_osapple iphone oseq8.0.1
apple:iphone_osapple iphone oseq8.0.2