CVE-2014-1347 in iTunes

Resumen

por MITRE

Apple iTunes before 11.2.1 on OS X sets world-writable permissions for /Users and /Users/Shared during reboots, which allows local users to modify files, and consequently obtain access to arbitrary user accounts, via standard filesystem operations.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservar: 2014-01-08
• Divulgación: 2014-05-18
• Moderación: aceptado
• Artículo: VDB-13251
• CPE: listo
• CWE: CWE-264 (confirmado)
• CVSS: 4.4 (NVD)
• EPSS: 0.00389
• KEV: no
• Actividades: muy bajo
• Sector: Hospital, Chemical, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-1347
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-1347
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-1347/