CVE

Id
71677  
CVE No.
CVE-2014-4381  
Status
Candidate  
Description
Libnotify in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking on write operations, which allows attackers to execute arbitrary code as root via a crafted application.  
Phase
Assigned (20140620)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
681000 71677 CVE-2014-4381 CONFIRM:http://support.apple.com/kb/HT6443  View
681001 71677 CVE-2014-4381 CONFIRM:http://support.apple.com/kb/HT6441  View
681002 71677 CVE-2014-4381 CONFIRM:http://support.apple.com/kb/HT6442  View
681003 71677 CVE-2014-4381 APPLE:APPLE-SA-2014-09-17-1  View
681004 71677 CVE-2014-4381 URL:http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html  View
681005 71677 CVE-2014-4381 APPLE:APPLE-SA-2014-09-17-2  View
681006 71677 CVE-2014-4381 URL:http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html  View
681007 71677 CVE-2014-4381 BID:69882  View
681008 71677 CVE-2014-4381 URL:http://www.securityfocus.com/bid/69882  View
681009 71677 CVE-2014-4381 BID:69931  View
681010 71677 CVE-2014-4381 URL:http://www.securityfocus.com/bid/69931  View
681011 71677 CVE-2014-4381 SECTRACK:1030866  View
681012 71677 CVE-2014-4381 URL:http://www.securitytracker.com/id/1030866  View
681013 71677 CVE-2014-4381 SECUNIA:61318  View
681014 71677 CVE-2014-4381 URL:http://secunia.com/advisories/61318  View
681015 71677 CVE-2014-4381 XF:appleios-cve20144381-code-exec(96083)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15445 JVNDB-2014-004320 複数の Apple 製品の IOKit における整数オーバーフローの脆弱性 複数の Apple 製品の IOKit には、整数オーバーフローの脆弱性が存在します。 CVE-2014-4389 71677 9.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004320.html  View