CVE-2014-4461

Published Nov 18, 2014

Last updated 6 years ago

Overview

Description
The kernel in Apple iOS before 8.1.1 and Apple TV before 7.0.2 does not properly validate IOSharedDataQueue object metadata, which allows attackers to execute arbitrary code in a privileged context via a crafted application.
Source
product-security@apple.com
NVD status
Modified

Risk scores

CVSS 2.0

Type
Primary
Base score
9.3
Impact score
10
Exploitability score
8.6
Vector string
AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov
CWE-20

Social media

Hype score
Not currently trending

Evaluator

Comment
Per an <a href="http://support.apple.com/en-us/HT204244">Apple Security Advisory</a> Apple OS X before versions 10.8.6, 10.9.6, 10.10.0 and 10.10.1 were also vulnerable.
Impact
-
Solution
-

Configurations