« Back to list

CVE-2014-1347

Status: ModifiedMedium (4.4)—

Apple iTunes before 11.2.1 on OS X sets world-writable permissions for /Users and /Users/Shared during reboots, which allows local users to modify files, and consequently obtain access to arbitrary user accounts, via standard filesystem operations.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

Apple — Itunes

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2014-1347",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.4,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.4,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "product-security@apple.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-05-18T11:12:54.313",
  "references": [
    {
      "url": "http://support.apple.com/kb/HT6251",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "product-security@apple.com"
    },
    {
      "url": "http://support.apple.com/kb/HT6251",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Apple iTunes before 11.2.1 on OS X sets world-writable permissions for /Users and /Users/Shared during reboots, which allows local users to modify files, and consequently obtain access to arbitrary user accounts, via standard filesystem operations."
    },
    {
      "lang": "es",
      "value": "Apple iTunes anterior a 11.2.1 en OS X configura permisos de lectura universal para /Users y /Users/Shared durante reinicios, lo que permite a usuarios locales modificar archivos, y como consecuencia obtener acceso a cuentas de usuarios arbitrarios, a través de operaciones estándar de sistemas de archivos."
    }
  ],
  "lastModified": "2026-06-17T00:04:44.450",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6722DFCA-3E6E-49FE-81AE-146243731138",
              "versionEndIncluding": "11.2"
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:11.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3979F15D-34E1-49F6-BCCE-21F4F680D9D8"
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:11.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4D0181AF-C382-4500-A7AC-220DCD619F96"
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:11.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6B04367A-1C86-4CF6-BCB7-3FA4D920E452"
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:11.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4F346750-0E04-46BC-94DD-524A2893D8FD"
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:11.0.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "48E955F0-51D4-4B91-AE05-5653800C3AC9"
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:11.0.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6925AABD-3132-4144-8209-E5C47ED8459F"
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:11.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B3EF55F1-D02F-4D20-9D35-02E83D3C0F6D"
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:11.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A7834154-4F1D-4ADD-8512-7C7CF76F8A34"
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:11.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3E9F1B66-20BF-4942-B266-05975298CA87"
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:11.1.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "17110B7B-4E90-4906-B21D-BBB14811B1F8"
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:11.1.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "23102AB3-E7C9-45F2-9B4A-480F23A18A0E"
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:11.1.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E0230093-CCB7-4F75-B9A2-9B073C31648D"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "0FF5999A-9D12-4CDD-8DE9-A89C10B2D574"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "product-security@apple.com"
}