CVE

Id
71682  
CVE No.
CVE-2014-4386  
Status
Candidate  
Description
Race condition in the App Installation feature in Apple iOS before 8 allows local users to gain privileges and install unverified apps by leveraging /tmp write access.  
Phase
Assigned (20140620)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
681039 71682 CVE-2014-4386 CONFIRM:http://support.apple.com/kb/HT6441  View
681040 71682 CVE-2014-4386 APPLE:APPLE-SA-2014-09-17-1  View
681041 71682 CVE-2014-4386 URL:http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html  View
681042 71682 CVE-2014-4386 BID:69882  View
681043 71682 CVE-2014-4386 URL:http://www.securityfocus.com/bid/69882  View
681044 71682 CVE-2014-4386 BID:69936  View
681045 71682 CVE-2014-4386 URL:http://www.securityfocus.com/bid/69936  View
681046 71682 CVE-2014-4386 SECTRACK:1030866  View
681047 71682 CVE-2014-4386 URL:http://www.securitytracker.com/id/1030866  View
681048 71682 CVE-2014-4386 XF:appleios-cve20144386-priv-esc(96085)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15470 JVNDB-2014-004345 Apple OS X の Intel Graphics Driver のサブシステムにおける任意のコードを実行される脆弱性 Apple OS X の Intel Graphics Driver のサブシステムの不特定のインテグレーテッドグラフィックドライバルーチンは、呼び出しを適切に検証しないため、特権付きコンテキスト内で任意のコードを実行される脆弱性が存在します。 CVE-2014-4394 71682 6.9 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004345.html  View