CVE-2014-1265: Medium severity Apple iOS and macOS vulnerability
The systemsetup program in the Date and Time subsystem in Apple OS X before 10.9.2 allows local users to bypass intended access restrictions by changing the current time on the system clock.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Apple OS X Date and Time subsystem (systemsetup)to a version that resolves this vulnerability.Fixed in 10.9.2
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1265?
CVE-2014-1265 is classified as a medium severity vulnerability that allows local users to bypass access restrictions.
How do I fix CVE-2014-1265?
To fix CVE-2014-1265, update your Apple OS X to version 10.9.2 or later.
Which versions of macOS are affected by CVE-2014-1265?
CVE-2014-1265 affects Apple OS X versions prior to 10.9.2, including 10.7.x and 10.8.x.
What kind of access can be gained due to CVE-2014-1265?
CVE-2014-1265 allows local users to change the system clock, potentially leading to unauthorized access to restricted features.
Who is affected by CVE-2014-1265?
Local users on affected versions of Apple OS X prior to 10.9.2 are the main audience affected by CVE-2014-1265.