NVD

Id
32444  
Name
CVE-2014-4455  
Description
dyld in Apple iOS before 8.1.1 and Apple TV before 7.0.2 does not properly handle overlapping segments in Mach-O executable files, which allows local users to bypass intended code-signing restrictions via a crafted file.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-11-18  
Modified Date
2016-12-07  
Seq
2014-4455  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
171097 32444 CVE-2014-4455 APPLE-SA-2014-11-17-1  View
171098 32444 CVE-2014-4455 APPLE-SA-2014-11-17-3  View
171099 32444 CVE-2014-4455 APPLE-SA-2015-01-27-1  View
171100 32444 CVE-2014-4455 APPLE-SA-2015-01-27-2  View
171101 32444 CVE-2014-4455 http://support.apple.com/HT204245  View
171102 32444 CVE-2014-4455 http://support.apple.com/HT204246  View
171103 32444 CVE-2014-4455 71140  View
171104 32444 CVE-2014-4455 1031231  View
171105 32444 CVE-2014-4455 appletv-cve20144455-code-exec(98773)  View
171106 32444 CVE-2014-4455 https://support.apple.com/en-us/HT204418  View
171107 32444 CVE-2014-4455 https://support.apple.com/en-us/HT204420  View
171108 32444 CVE-2014-4455 https://support.apple.com/en-us/HT6590  View
171109 32444 CVE-2014-4455 https://support.apple.com/en-us/HT6592  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16635 JVNDB-2014-005510 Apple iOS および Apple TV の dyld におけるコード署名の制限を回避される脆弱性 Apple iOS および Apple TV の dyld は、Mach-O 実行ファイルの重複するセグメントを適切に処理しないため、コード署名の制限を回避される脆弱性が存在します。 CVE-2014-4455 71743 CVE-2014-4455 32444 2.1 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005510.html 2014-11-17 2015-02-02 View