CVE-2014-1272: Medium severity tvOS vulnerability
Published Mar 14, 2014
·Updated
CrashHouseKeeping in Crash Reporting in Apple iOS before 7.1 and Apple TV before 6.1 allows local users to change arbitrary file permissions by leveraging a symlink.
Affected Software
10 affected components
tvOS<=6.0.2
tvOS=6.0
tvOS=6.0.1
iPhone OS<=7.0.6
iPhone OS=7.0
iPhone OS=7.0.1
iPhone OS=7.0.2
iPhone OS=7.0.3
iPhone OS=7.0.4
iPhone OS=7.0.5
Event History
Mar 14, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
via NVD·10:55 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-1272?
CVE-2014-1272 is categorized as a medium severity vulnerability due to its potential to manipulate file permissions.
2
How do I fix CVE-2014-1272?
To mitigate CVE-2014-1272, update your iOS to version 7.1 or later, or update tvOS to version 6.1 or later.
3
Who is affected by CVE-2014-1272?
CVE-2014-1272 affects users of Apple iOS versions prior to 7.1 and tvOS versions prior to 6.1.
4
What type of attack does CVE-2014-1272 facilitate?
CVE-2014-1272 enables local users to exploit a symlink to change arbitrary file permissions.
5
Is CVE-2014-1272 exploitable remotely?
No, CVE-2014-1272 is not remotely exploitable as it requires local access to the affected systems.