CVE

Id
71684  
CVE No.
CVE-2014-4388  
Status
Candidate  
Description
IOKit in Apple iOS before 8 and Apple TV before 7 does not properly validate IODataQueue object metadata, which allows attackers to execute arbitrary code in a privileged context via an application that provides crafted values in unspecified metadata fields, a different vulnerability than CVE-2014-4418.  
Phase
Assigned (20140620)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
681049 71684 CVE-2014-4388 CONFIRM:http://support.apple.com/kb/HT6443  View
681050 71684 CVE-2014-4388 CONFIRM:https://support.apple.com/kb/HT6535  View
681051 71684 CVE-2014-4388 CONFIRM:http://support.apple.com/kb/HT6441  View
681052 71684 CVE-2014-4388 CONFIRM:http://support.apple.com/kb/HT6442  View
681053 71684 CVE-2014-4388 APPLE:APPLE-SA-2014-09-17-1  View
681054 71684 CVE-2014-4388 URL:http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html  View
681055 71684 CVE-2014-4388 APPLE:APPLE-SA-2014-09-17-2  View
681056 71684 CVE-2014-4388 URL:http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html  View
681057 71684 CVE-2014-4388 APPLE:APPLE-SA-2014-10-16-1  View
681058 71684 CVE-2014-4388 URL:http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html  View
681059 71684 CVE-2014-4388 BID:69882  View
681060 71684 CVE-2014-4388 URL:http://www.securityfocus.com/bid/69882  View
681061 71684 CVE-2014-4388 BID:69948  View
681062 71684 CVE-2014-4388 URL:http://www.securityfocus.com/bid/69948  View
681063 71684 CVE-2014-4388 SECTRACK:1030866  View
681064 71684 CVE-2014-4388 URL:http://www.securitytracker.com/id/1030866  View
681065 71684 CVE-2014-4388 XF:appleios-cve20144388-code-exec(96093)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15466 JVNDB-2014-004341 Apple OS X の Intel Graphics Driver のサブシステムにおける任意のコードを実行される脆弱性 Apple OS X の Intel Graphics Driver のサブシステム内の不特定のインテグレーテッドグラフィックドライバルーチンは、呼び出しを適切に検証しないため、特権付きコンテキスト内で任意のコードを実行される脆弱性が存在します。 CVE-2014-4396 71684 6.9 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004341.html  View