medium4.4
CVE-2014-1347
Apple iTunes before 11.2.1 on OS X sets world-writable permissions for /Users and /Users/Shared during reboots, which allows local users to modify files, and c…
Impact
Apple iTunes before 11.2.1 on OS X sets world-writable permissions for /Users and /Users/Shared during reboots, which allows local users to modify files, and consequently obtain access to arbitrary user accounts, via standard filesystem operations.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Itunes | through 11.2 Versions 11.0, 11.0.1, 11.0.2, 11.0.3, 11.0.4 |