NetSight
IP …
medium4.9

CVE-2014-1320

IOKit in Apple iOS before 7.1.1, Apple OS X through 10.9.2, and Apple TV before 6.1.1 places kernel pointers into an object data structure, which makes it easi…

Impact

IOKit in Apple iOS before 7.1.1, Apple OS X through 10.9.2, and Apple TV before 6.1.1 places kernel pointers into an object data structure, which makes it easier for local users to bypass the ASLR protection mechanism by reading unspecified attributes of the object.

Affected products

VendorProductAffected versions
AppleMac Os X
through 10.9.2
Versions 10.9, 10.9.1
AppleIphone Os
through 7.1
Versions 7.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4
AppleTvos
through 6.1
Versions 6.0, 6.0.1, 6.0.2

Weakness classification

CWE-200

References