Lucene search
AppleCVELIST:CVE-2014-4496HistoryJan 30, 2015 - 11:00 a.m.
CVE-2014-4496
2015-01-3011:00:00
apple
www.cve.org
5
The mach_port_kobject interface in the kernel in Apple iOS before 8.1.3 and Apple TV before 7.0.3 does not properly restrict kernel-address and heap-permutation information, which makes it easier for attackers to bypass the ASLR protection mechanism via a crafted app.
References
lists.apple.com/archives/security-announce/2015/Jan/msg00000.html
lists.apple.com/archives/security-announce/2015/Jan/msg00001.html
lists.apple.com/archives/security-announce/2015/Mar/msg00002.html
support.apple.com/HT204245
support.apple.com/HT204246
www.securityfocus.com/bid/72334
www.securitytracker.com/id/1031652
support.apple.com/HT204413
Related
cve
cve
CVE-2014-4496
2015-01-30 11:59:25
nvd
nvd
CVE-2014-4496
2015-01-30 11:59:25
prion
prion
Design/Logic Flaw
2015-01-30 11:59:00
nessus
nessus
Mac OS X Multiple Vulnerabilities (Security Update 2015-002)
2015-03-10 00:00:00
Apple TV < 7.0.3 Multiple Vulnerabilities
2015-03-04 00:00:00
Apple iOS < 8.1.3 Multiple Vulnerabilities
2015-03-04 00:00:00
securityvulns
securityvulns
Apple Mac OS X multiple security vulnerabilities
2015-03-21 00:00:00
APPLE-SA-2015-03-09-3 Security Update 2015-002
2015-03-16 00:00:00
APPLE-SA-2015-01-27-1 Apple TV 7.0.3
2015-02-02 00:00:00