CVE-2014-1347 in iTunes

सारांश

द्वारा MITRE

Apple iTunes before 11.2.1 on OS X sets world-writable permissions for /Users and /Users/Shared during reboots, which allows local users to modify files, and consequently obtain access to arbitrary user accounts, via standard filesystem operations.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• आरक्षित करना: 08/01/2014
• प्रकटीकरण: 18/05/2014
• संयम: स्वीकृत
• प्रविष्टि: VDB-13251
• CPE: तैयार
• CWE: CWE-264 (पुष्टि की गई)
• CVSS: 4.4 (NVD)
• EPSS: 0.00389
• KEV: नहीं
• गतिविधियाँ: बहुत कम
• क्षेत्र: Pharma, Education, ...

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-1347
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-1347
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-1347/