CVE

Id
71676  
CVE No.
CVE-2014-4380  
Status
Candidate  
Description
The IOHIDFamily kernel extension in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking on write operations, which allows attackers to execute arbitrary code in the kernel"s context via a crafted application.  
Phase
Assigned (20140620)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
680981 71676 CVE-2014-4380 CONFIRM:https://support.apple.com/kb/HT6535  View
680982 71676 CVE-2014-4380 CONFIRM:https://support.apple.com/HT204659  View
680983 71676 CVE-2014-4380 CONFIRM:http://support.apple.com/kb/HT6441  View
680984 71676 CVE-2014-4380 CONFIRM:http://support.apple.com/kb/HT6442  View
680985 71676 CVE-2014-4380 APPLE:APPLE-SA-2014-09-17-1  View
680986 71676 CVE-2014-4380 URL:http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html  View
680987 71676 CVE-2014-4380 APPLE:APPLE-SA-2014-09-17-2  View
680988 71676 CVE-2014-4380 URL:http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html  View
680989 71676 CVE-2014-4380 APPLE:APPLE-SA-2014-10-16-1  View
680990 71676 CVE-2014-4380 URL:http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html  View
680991 71676 CVE-2014-4380 APPLE:APPLE-SA-2015-04-08-2  View
680992 71676 CVE-2014-4380 URL:http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html  View
680993 71676 CVE-2014-4380 BID:69882  View
680994 71676 CVE-2014-4380 URL:http://www.securityfocus.com/bid/69882  View
680995 71676 CVE-2014-4380 BID:69942  View
680996 71676 CVE-2014-4380 URL:http://www.securityfocus.com/bid/69942  View
680997 71676 CVE-2014-4380 SECTRACK:1030866  View
680998 71676 CVE-2014-4380 URL:http://www.securitytracker.com/id/1030866  View
680999 71676 CVE-2014-4380 XF:appleios-cve20144380-code-exec(96110)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15444 JVNDB-2014-004319 複数の Apple 製品の IOKit における特権付きコンテキスト内で任意のコードを実行される脆弱性 複数の Apple 製品の IOKit は、IODataQueue オブジェクトのメタデータを適切に検証しないため、特権付きコンテキスト内で任意のコードを実行される脆弱性が存在します。 CVE-2014-4388 71676 9.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004319.html  View