Multiple Apple Products Multiple Security Vulnerabilities
BID:72327
Info
Multiple Apple Products Multiple Security Vulnerabilities
| Bugtraq ID: | 72327 |
| Class: | Unknown |
| CVE: |
CVE-2014-4481 CVE-2014-4483 CVE-2014-4484 CVE-2014-4485 CVE-2014-4486 CVE-2014-4487 CVE-2014-4488 CVE-2014-4489 CVE-2014-4491 CVE-2014-4495 CVE-2014-4492 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 27 2015 12:00AM |
| Updated: | Feb 04 2015 12:01AM |
| Credit: | Felipe Andres Manzano of the Binamuse VRT, Gaurav Baruah working with HP's Zero Day Initiative, Ian Beer of Google Project Zero, TaiG Jailbreak Team, @beist, @PanguTeam, Stefan Esser, |
| Vulnerable: |
Apple iPod Touch 0 Apple iPhone 0 Apple iPad 0 Apple iOS 4.2.1 Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 3.2.2 Apple iOS 3.2.1 Apple iOS 5.1.1 Apple iOS 5.1 Apple iOS 5.0.1 Apple iOS 5 Apple iOS 4.3.5 Apple iOS 4.3.4 Apple iOS 4.3.3 Apple iOS 4.3.2 Apple iOS 4.3.1 Apple iOS 4.3 Apple iOS 4.2.9 Apple iOS 4.2.8 Apple iOS 4.2.7 Apple iOS 4.2.6 Apple iOS 4.2.5 Apple iOS 4.2.10 Apple iOS 4.2 beta Apple iOS 4.2 Apple iOS 4.1 Apple iOS 4 Apple iOS 3.2 Apple iOS 3.1 Apple iOS 3.0 Apple iOS 2.1 Apple iOS 2.0 Apple Apple TV 5.0 Apple Apple TV 4.4 Apple Apple TV 4.3 Apple Apple TV 4.2 Apple Apple TV 4.1 Apple Apple TV 4.0 Apple Apple TV 2.1 Apple Apple TV 1.0 |
| Not Vulnerable: | |
Discussion
Multiple Apple Products Multiple Security Vulnerabilities
Multiple Apple products are prone to multiple security vulnerabilities.
The update addresses new vulnerabilities that affect CoreGraphics, FontParser, Foundation, IOAcceleratorFamily, IOHIDFamily, Kernel, and libnetcoreCore components.
Attackers can exploit these issues to execute arbitrary code, disclose sensitive information and perform other attacks. Failed attacks may cause denial-of-service conditions.
Multiple Apple products are prone to multiple security vulnerabilities.
The update addresses new vulnerabilities that affect CoreGraphics, FontParser, Foundation, IOAcceleratorFamily, IOHIDFamily, Kernel, and libnetcoreCore components.
Attackers can exploit these issues to execute arbitrary code, disclose sensitive information and perform other attacks. Failed attacks may cause denial-of-service conditions.
Exploit / POC
Multiple Apple Products Multiple Security Vulnerabilities
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Some of these issues may be trivial to exploit and will not require specific exploit code.
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Some of these issues may be trivial to exploit and will not require specific exploit code.
Solution / Fix
Multiple Apple Products Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Multiple Apple Products Multiple Security Vulnerabilities
References:
References:
- Apple iOS Homepage (Apple)
- Apple TV Homepage (Apple)
- Mac OS X Homepage (Apple)