Information disclosure in Apple Iphone OS
CVE-2014-1320
IOKit in Apple iOS before 7.1.1, Apple OS X through 10.9.2, and Apple TV before 6.1.1 places kernel pointers into an object data structure, which makes it easier for local users to bypass the ASLR protection mechanism by reading unspecified attributes of the object.
Vulnerability class: Information Disclosure
EPSS: 0.004 (29.5th percentile) — read the EPSS interpretation.
Affected products
- Apple Iphone_os — versions 7.0, 7.0.1, 7.0.2
- Apple Mac_os_x — versions 10.9, 10.9.1
- Apple Tvos — versions 6.0, 6.0.1, 6.0.2
- N/a — versions n/a
Weakness classification (CWE)
References
- product-security@apple.com (vendor-advisory, x_refsource_APPLE)
- product-security@apple.com (vendor-advisory, x_refsource_APPLE)
- product-security@apple.com (vendor-advisory, x_refsource_APPLE)