CVE

Id
71679  
CVE No.
CVE-2014-4383  
Status
Candidate  
Description
The Assets subsystem in Apple iOS before 8 and Apple TV before 7 allows man-in-the-middle attackers to spoof a device"s update status via a crafted Last-Modified HTTP response header.  
Phase
Assigned (20140620)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
681016 71679 CVE-2014-4383 CONFIRM:http://support.apple.com/kb/HT6441  View
681017 71679 CVE-2014-4383 CONFIRM:http://support.apple.com/kb/HT6442  View
681018 71679 CVE-2014-4383 APPLE:APPLE-SA-2014-09-17-1  View
681019 71679 CVE-2014-4383 URL:http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html  View
681020 71679 CVE-2014-4383 APPLE:APPLE-SA-2014-09-17-2  View
681021 71679 CVE-2014-4383 URL:http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html  View
681022 71679 CVE-2014-4383 BID:69882  View
681023 71679 CVE-2014-4383 URL:http://www.securityfocus.com/bid/69882  View
681024 71679 CVE-2014-4383 BID:69941  View
681025 71679 CVE-2014-4383 URL:http://www.securityfocus.com/bid/69941  View
681026 71679 CVE-2014-4383 SECTRACK:1030866  View
681027 71679 CVE-2014-4383 URL:http://www.securitytracker.com/id/1030866  View
681028 71679 CVE-2014-4383 XF:appleios-cve20144383-spoofing(96088)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15989 JVNDB-2014-004864 Apple OS X のコード署名機能におけるアプリ作者の制限を回避される脆弱性 Apple OS X のコード署名機能は、署名されたバンドルのリソースのエンベロープを適切に処理しないため、アプリ作者の制限を回避される脆弱性が存在します。 CVE-2014-4391 71679 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004864.html  View