CVE-2014-1320

Published: Apr 23, 2014Modified: May 6, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:C/I:N/A:N

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

IOKit in Apple iOS before 7.1.1, Apple OS X through 10.9.2, and Apple TV before 6.1.1 places kernel pointers into an object data structure, which makes it easier for local users to bypass the ASLR protection mechanism by reading unspecified attributes of the object.

Affected (15)

Products: Apple: Mac Os X, Iphone Os, Tvos

3 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Apple Mac Os X	Up to 10.9.2
Apple Mac Os X	Version 10.9.1
Apple Mac Os X	Version 10.9

Configuration B

8 vulnerable

Vulnerable Software	Affected Versions
Apple Iphone Os	Up to 7.1
Apple Iphone Os	Version 7.0.1
Apple Iphone Os	Version 7.0.2
Apple Iphone Os	Version 7.0.3
Apple Iphone Os	Version 7.0.4
Apple Iphone Os	Version 7.0.5
Apple Iphone Os	Version 7.0.6
Apple Iphone Os	Version 7.0