CVE-2014-4492 in Apple iOS
Sumário (Inglês)
libnetcore in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not verify that certain values have the expected data type, which allows attackers to execute arbitrary code in an _networkd context via a crafted XPC message from a sandboxed app, as demonstrated by lack of verification of the XPC dictionary data type.
Reservar
20/06/2014
Divulgação
30/01/2015
Inscrições
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidade | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 68937 | Apple iOS libnetcore | 19 | Prova de conceito | Correção oficial | CVE-2014-4492 |
| 68902 | Apple Mac OS X libnetcore | 19 | Prova de conceito | Correção oficial | CVE-2014-4492 |