CVE-2014-4353

Race condition in iMessage in Apple iOS before 8 allows attackers to obtain sensitive information by leveraging the presence of an attachment after the deletion of its parent (1) iMessage or (2) MMS.

Score

CVSS 2.0 4.3 Medium

Status

Modified - product-security@apple.com

Published

2014-09-18

Last modified

2024-08-06

Weaknesses

CWE-362

Affected products

• Iphone Os (Apple)

References

• http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html
• http://support.apple.com/kb/HT6441
• http://www.securityfocus.com/bid/69882
• http://www.securityfocus.com/bid/69951
• http://www.securitytracker.com/id/1030866
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96095