Lucene search

[email protected]CVE-2014-4487

HistoryJan 30, 2015 - 11:59 a.m.

CVE-2014-4487

2015-01-3011:59:18

CWE-119

[email protected]

web.nvd.nist.gov

cve-2014-4487

buffer overflow

iohidfamily

apple ios

apple os x

apple tv

arbitrary code execution

privileged context

crafted app

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

4.3 Medium

AI Score

Confidence

High

0.028 Low

EPSS

Percentile

90.7%

JSON

Buffer overflow in IOHIDFamily in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 allows attackers to execute arbitrary code in a privileged context via a crafted app.

Affected configurations

NVD

Node

appleiphone_osRange≤8.1.2

applemac_os_xRange≤10.10.1

appletvosRange≤7.0.1

CPENameOperatorVersion
apple:iphone_osapple iphone osle8.1.2
apple:mac_os_xapple mac os xle10.10.1
apple:tvosapple tvosle7.0.1

CPE	Name	Operator	Version
apple:iphone_os	apple iphone os	le	8.1.2
apple:mac_os_x	apple mac os x	le	10.10.1
apple:tvos	apple tvos	le	7.0.1

References

lists.apple.com/archives/security-announce/2015/Jan/msg00000.html

lists.apple.com/archives/security-announce/2015/Jan/msg00001.html

lists.apple.com/archives/security-announce/2015/Jan/msg00003.html

support.apple.com/HT204244

support.apple.com/HT204245

support.apple.com/HT204246

www.securitytracker.com/id/1031650

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

4.3 Medium

AI Score

Confidence

High

0.028 Low

EPSS

Percentile

90.7%

JSON

Related for CVE-2014-4487

nvd1 prion1 cvelist1 nessus6 securityvulns6