CVE-2014-1320 in iOS

Summary

IOKit in Apple iOS before 7.1.1, Apple OS X through 10.9.2, and Apple TV before 6.1.1 places kernel pointers into an object data structure, which makes it easier for local users to bypass the ASLR protection mechanism by reading unspecified attributes of the object.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

01/08/2014

Disclosure

04/23/2014

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
13045	Apple iOS IOKit Kernel information disclosure	200	Not defined	Official fix	CVE-2014-1320
13035	Apple Mac OS X IOKit Kernel information disclosure	200	Unproven	Official fix	CVE-2014-1320

Sources

• MITRE
• NVD
• CVE Details