« Volver al listado

CVE-2014-4369

Estado: ModificadaAlta (7.8)—

La implementación IOAcceleratorFamily API en Apple iOS anterior a 8 y Apple TV anterior a 7 permite a atacantes causar una denegación de servicio (referencia a puntero nulo y cuelgue del dispositivo) a través de una aplicación que usa argumentos manipulados.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Apple — Iphone OSApple — Tvos

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-4369",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "product-security@apple.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-09-18T10:55:09.110",
  "references": [
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html",
      "source": "product-security@apple.com"
    },
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html",
      "source": "product-security@apple.com"
    },
    {
      "url": "http://support.apple.com/kb/HT6441",
      "source": "product-security@apple.com"
    },
    {
      "url": "http://support.apple.com/kb/HT6442",
      "source": "product-security@apple.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/69882",
      "source": "product-security@apple.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/69929",
      "source": "product-security@apple.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1030866",
      "source": "product-security@apple.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/96106",
      "source": "product-security@apple.com"
    },
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://support.apple.com/kb/HT6441",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://support.apple.com/kb/HT6442",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/69882",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/69929",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1030866",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/96106",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The IOAcceleratorFamily API implementation in Apple iOS before 8 and Apple TV before 7 allows attackers to cause a denial of service (NULL pointer dereference and device crash) via an application that uses crafted arguments."
    },
    {
      "lang": "es",
      "value": "La implementación IOAcceleratorFamily API en Apple iOS anterior a 8 y Apple TV anterior a 7 permite a atacantes causar una denegación de servicio (referencia a puntero nulo y cuelgue del dispositivo) a través de una aplicación que usa argumentos manipulados."
    }
  ],
  "lastModified": "2026-06-17T00:09:52.660",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "68138EEE-F622-4E94-BC41-1106671EC927",
              "versionEndIncluding": "6.2"
            },
            {
              "criteria": "cpe:2.3:o:apple:tvos:6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5365205F-B91D-4123-8CFD-EA42E0DEA944"
            },
            {
              "criteria": "cpe:2.3:o:apple:tvos:6.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D8C7F676-5ACC-4330-9591-465CA8AF77AA"
            },
            {
              "criteria": "cpe:2.3:o:apple:tvos:6.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D5314D7F-8352-41F5-A155-5E5392C58ABF"
            },
            {
              "criteria": "cpe:2.3:o:apple:tvos:6.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "36567F18-DE70-4189-A52E-A0376C779B7C"
            },
            {
              "criteria": "cpe:2.3:o:apple:tvos:6.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5EA1745A-E240-462A-BDA9-200DB6AC112F"
            },
            {
              "criteria": "cpe:2.3:o:apple:tvos:6.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EC814F33-E1D4-4910-BD1C-2C002D734415"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4B2B0F1C-DDAC-476D-A908-CE338CF5D7A6",
              "versionEndIncluding": "7.1.2"
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "07A11433-B725-4BD6-B998-4B3637F061EC"
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:7.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4FD62141-07B1-4E3D-80BC-25D519F90DBD"
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:7.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D9737BD4-B4F4-4291-A1E9-B692ECBC657E"
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:7.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B6160869-944D-4E34-BB81-6A1259D692B1"
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:7.0.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "090CAC3C-4B20-46E5-A8C7-950B7E1DB5E9"
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:7.0.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E96F77DD-0962-4E55-97A2-9BC2FE01D8A8"
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:7.0.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8BD9ACBF-34A4-4181-A6E0-78ABD4FC9ACB"
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:7.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EDF40E86-E5D2-4D66-B296-ADFA78B42113"
            },
            {
              "criteria": "cpe:2.3:o:apple:iphone_os:7.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "997D8B0E-44AC-4598-B533-AB31CBE5E2F2"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "evaluatorComment": "<a href=\"http://cwe.mitre.org/data/definitions/476.html\" target=\"_blank\">CWE-476: NULL Pointer Dereference</a>",
  "sourceIdentifier": "product-security@apple.com"
}