NetSight
IP …
high7.8Known exploitedPublic exploit code

CVE-2014-4404

Apple OS X Heap-Based Buffer Overflow Vulnerability

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-02-10. Federal due date: 2022-08-10.

Apply updates per vendor instructions.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted key-mapping properties.

Affected products

VendorProductAffected versions
AppleIphone Os
before 8.0
AppleMac Os X
before 10.10.0
from 10.10.1 before 10.10.3
AppleTvos
before 7.0

Weakness classification

CWE-787

References