Multiple Apple Products CVE-2014-1296 Information Disclosure Vulnerability

Bugtraq ID:	67024
Class:	Design Error
CVE:	CVE-2014-1296
Remote:	Yes
Local:	No
Published:	Apr 22 2014 12:00AM
Updated:	May 16 2014 04:13AM
Credit:	Antoine Delignat-Lavaud of Prosecco at Inria Paris
Vulnerable:	Apple iPhone 4.0.1 Apple iPhone 4.3.3 Apple iPhone 4.3.2 Apple iPhone 4.3.1 Apple iPhone 4.3.0 Apple iPhone 4.2.8 Apple iPhone 4.2.5 Apple iPhone 4.2.1 Apple iPhone 4.1 Apple iPhone 4.0.2 Apple iPhone 4.0 Apple iPad 3.2.1 Apple iPad 3.2.2 Apple iPad 3.2 Apple Apple TV 5.0 Apple Apple TV 4.4 Apple Apple TV 4.3 Apple Apple TV 4.2 Apple Apple TV 4.1 Apple Apple TV 4.0 Apple Apple TV 2.1
Not Vulnerable:

Multiple Apple Products CVE-2014-1296 Information Disclosure Vulnerability

Multiple Apple products are prone to an information-disclosure vulnerability.

Successful exploits may allow the attacker to gain access to sensitive information. Information obtained may lead to further attacks.

Multiple Apple Products CVE-2014-1296 Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Apple Products CVE-2014-1296 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple Apple Products CVE-2014-1296 Information Disclosure Vulnerability

References:

• Apple iOS Homepage (Apple)
  
• Apple TV Homepage (Apple)
  
• Mac OS X Homepage (Apple)