CVE-2014-4453 in Mac OS X

Résumé

par MITRE

Apple iOS before 8.1.1 and OS X before 10.10.1 include location data during establishment of a Spotlight Suggestions server connection by Spotlight or Safari, which might allow remote attackers to obtain sensitive information via unspecified vectors.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Réserver: 20/06/2014
• Divulgation: 18/11/2014
• Modérer: accepté
• Entrée: VDB-68230
• CPE: prêt
• CWE: CWE-200 (confirmé)
• CVSS: 5.0 (NVD)
• EPSS: 0.01817
• KEV: non
• Activités: très faible
• Secteur: Industry, Hospital, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-4453
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-4453
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-4453/