CVE-2014-8840 — Apple Iphone OS vulnerability

CWE-3103 documents3 sources
Severity
6.8MEDIUMNVD
EPSS
0.4%
top 39.75%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple Iphone OSApple IOS
Timeline
PublishedJan 30
Latest updateMay 17

Description

The iTunes Store component in Apple iOS before 8.1.3 allows remote attackers to bypass a Safari sandbox protection mechanism by leveraging redirection of an SSL URL to the iTunes Store.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages2 packages

▶NVDapple/iphone_os8.1.2
▶Appleapple/ios8.1.3

🔴Vulnerability Details

1
GHSA
GHSA-5556-cw4f-pcjm: The iTunes Store component in Apple iOS before 8↗2022-05-17
▶

📋Vendor Advisories

1
Apple
CVE-2014-8840: iOS 8.1.3↗
▶
CVE-2014-8840 — Apple Iphone OS vulnerability | cvebase