PT-2014-4058 · Apple · Tv+1

Evad3Rs · Publicado 2014-03-14 · Atualizado 2019-03-08 · CVE-2014-1272

Positive Technologies (AI Summary)

CVSS v2.0

6.3

Média

Vetor base

AV:L/AC:M/Au:N/C:N/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1 Apple TV versions prior to 6.1

Description The issue allows local users to change arbitrary file permissions by leveraging a symlink in CrashHouseKeeping, which is part of Crash Reporting.

Recommendations For Apple iOS versions prior to 7.1, update to version 7.1 or later. For Apple TV versions prior to 6.1, update to version 6.1 or later.

Correção

Link Following

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

CVE-2014-1272

Produtos afetados

Tv

Ios

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2014-1272 · Nota de Segurança
• http://support.apple.com/kb/HT6163 · Aviso do Fabricante
• http://support.apple.com/kb/HT6162 · Aviso do Fabricante