CVE-2014-4404

Summary

Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted key-mapping properties.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://support.apple.com/HT204659
• http://support.apple.com/kb/HT6441
• http://www.securitytracker.com/id/1030866
• http://www.securityfocus.com/bid/69947
• http://support.apple.com/kb/HT6442
• http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html
• http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html
• http://www.securityfocus.com/bid/69882
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96111
• http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
• https://support.apple.com/kb/HT6535
• http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html

CISA ADP Vulnrichment

• SSVC:
• Exploitation: active
  • Automatable: no
  • Technical Impact: total

Additional References

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-4404

References

• https://support.apple.com/HT204659
• http://support.apple.com/kb/HT6441
• http://www.securitytracker.com/id/1030866
• http://www.securityfocus.com/bid/69947
• http://support.apple.com/kb/HT6442
• http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html
• http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html
• http://www.securityfocus.com/bid/69882
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96111
• http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
• https://support.apple.com/kb/HT6535
• http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html

• ←Previous
• Next→