NuytsTech Security

CVE-2014-4418

by ·

IOKit in Apple iOS before 8 and Apple TV before 7 does not properly validate IODataQueue object metadata, which allows attackers to execute arbitrary code in a privileged context via an application that provides crafted values in unspecified metadata fields, a different vulnerability than CVE-2014-4388.

Date published : 2014-09-18

http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html

http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html

Tags: