CVE-2014-4353: Race Condition
Published Sep 18, 2014
·Updated
Race condition in iMessage in Apple iOS before 8 allows attackers to obtain sensitive information by leveraging the presence of an attachment after the deletion of its parent (1) iMessage or (2) MMS.
Affected Software
10 affected components
apple iPhone OS<=7.1.2
apple iPhone OS=7.0
apple iPhone OS=7.0.1
apple iPhone OS=7.0.2
apple iPhone OS=7.0.3
apple iPhone OS=7.0.4
apple iPhone OS=7.0.5
apple iPhone OS=7.0.6
apple iPhone OS=7.1
apple iPhone OS=7.1.1
Event History
Sep 18, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-4353?
CVE-2014-4353 is classified as a moderate severity vulnerability.
2
How do I fix CVE-2014-4353?
To mitigate CVE-2014-4353, users should update their iOS to version 8.0 or later.
3
Which versions of iOS are affected by CVE-2014-4353?
CVE-2014-4353 affects iOS versions prior to 8, specifically versions up to 7.1.2.
4
What kind of information can be exposed due to CVE-2014-4353?
CVE-2014-4353 could allow attackers to obtain sensitive information contained in deleted iMessage or MMS attachments.
5
Is there a workaround for CVE-2014-4353?
Currently, there are no known effective workarounds for CVE-2014-4353 other than upgrading to a secure version of iOS.