CVE-2014-4489 in iOS

Summary

IOHIDFamily in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not properly initialize event queues, which allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

06/20/2014

Disclosure

01/30/2015

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
68932	Apple iOS IOHIDFamily null pointer dereference	476	Not defined	Official fix	CVE-2014-4489
68887	Apple Mac OS X IOHIDFamily privileges management	269	Unproven	Official fix	CVE-2014-4489

Sources

• MITRE
• NVD
• CVE Details