CVE-2014-4491

The extension APIs in the kernel in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 do not prevent the presence of addresses within an OSBundleMachOHeaders key in a response, which makes it easier for attackers to bypass the ASLR protection mechanism via a crafted app.

Score
CVSS 2.0 5.0 Medium
Status
Modified - product-security@apple.com
Published
2015-01-30
Last modified
2024-08-06
Weaknesses
CWE-200

Affected products

References

 
 
© AVABIS GmbH privacypolicy about