CVE-2014-1320: Infoleak
First published: Wed Apr 23 2014(Updated: )
IOKit in Apple iOS before 7.1.1, Apple OS X through 10.9.2, and Apple TV before 6.1.1 places kernel pointers into an object data structure, which makes it easier for local users to bypass the ASLR protection mechanism by reading unspecified attributes of the object.
Credit: product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple iOS and macOS | <=10.9.2 | |
| Apple iOS and macOS | =10.9 | |
| Apple iOS and macOS | =10.9.1 | |
| iStyle @cosme iPhone OS | <=7.1 | |
| iStyle @cosme iPhone OS | =7.0 | |
| iStyle @cosme iPhone OS | =7.0.1 | |
| iStyle @cosme iPhone OS | =7.0.2 | |
| iStyle @cosme iPhone OS | =7.0.3 | |
| iStyle @cosme iPhone OS | =7.0.4 | |
| iStyle @cosme iPhone OS | =7.0.5 | |
| iStyle @cosme iPhone OS | =7.0.6 | |
| tvOS | <=6.1 | |
| tvOS | =6.0 | |
| tvOS | =6.0.1 | |
| tvOS | =6.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-1320?
CVE-2014-1320 has a medium severity rating, indicating a significant risk of exploitation under specific conditions.
How do I fix CVE-2014-1320?
To remediate CVE-2014-1320, update your device to the latest available version of iOS, OS X, or tvOS that addresses this vulnerability.
Who is affected by CVE-2014-1320?
CVE-2014-1320 affects users of Apple iOS before 7.1.1, OS X through 10.9.2, and tvOS before 6.1.1.
What kind of vulnerability is CVE-2014-1320?
CVE-2014-1320 is a local privilege escalation vulnerability that allows users to bypass ASLR protections.
What are the potential consequences of CVE-2014-1320?
Exploitation of CVE-2014-1320 could allow local attackers to execute arbitrary code with kernel privileges.
- agent/type
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/apple
- canonical/apple ios and macos
- version/apple ios and macos/10.9.2
- version/apple ios and macos/10.9
- version/apple ios and macos/10.9.1
- canonical/istyle @cosme iphone os
- version/istyle @cosme iphone os/7.1
- version/istyle @cosme iphone os/7.0
- version/istyle @cosme iphone os/7.0.1
- version/istyle @cosme iphone os/7.0.2
- version/istyle @cosme iphone os/7.0.3
- version/istyle @cosme iphone os/7.0.4
- version/istyle @cosme iphone os/7.0.5
- version/istyle @cosme iphone os/7.0.6
- canonical/tvos
- version/tvos/6.1
- version/tvos/6.0
- version/tvos/6.0.1
- version/tvos/6.0.2