CVE-2014-1273 — Improper Input Validation in Apple Iphone OS

CWE-20 — Improper Input Validation3 documents3 sources
Severity
5.8MEDIUMNVD
EPSS
0.2%
top 55.19%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple Iphone OSApple Tvos
Timeline
PublishedMar 14
Latest updateMay 14

Description

dyld in Apple iOS before 7.1 and Apple TV before 6.1 allows attackers to bypass code-signing requirements by leveraging use of text-relocation instructions in a dynamic library.

CVSS vector

AV:N/AC:M/C:P/I:P/A:NExploitability: 8.6 | Impact: 4.9

Affected Packages2 packages

▶NVDapple/tvos6.0.2+2
▶NVDapple/iphone_os7.0.6+6

🔴Vulnerability Details

1
GHSA
GHSA-3mr2-8x9w-g877: dyld in Apple iOS before 7↗2022-05-14
▶

💬Community

1
Bugzilla
CVE-2014-9721 zeromq: protocol downgrade attack on sockets using the ZMTP v3 protocol↗2015-05-14
▶