CVE-2014-1320
Last modified
CVE-2014-1320 is a vulnerability of currently unknown severity. IOKit in Apple iOS before 7.1.1, Apple OS X through 10.9.2, and Apple TV before 6.1.1 places kernel pointers into an object data structure, which makes it easier for local users to bypass the ASLR protection mechanism by reading unspecified attributes of the object.. EPSS estimates a 0.37% chance of exploitation in the next 30 days.
Description
IOKit in Apple iOS before 7.1.1, Apple OS X through 10.9.2, and Apple TV before 6.1.1 places kernel pointers into an object data structure, which makes it easier for local users to bypass the ASLR protection mechanism by reading unspecified attributes of the object.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apple | Mac Os X | <= 10.9.2 |
| Apple | Mac Os X | 10.9 |
| Apple | Mac Os X | 10.9.1 |
| Apple | Iphone Os | <= 7.1 |
| Apple | Iphone Os | 7.0 |
| Apple | Iphone Os | 7.0.1 |
| Apple | Iphone Os | 7.0.2 |
| Apple | Iphone Os | 7.0.3 |
| Apple | Iphone Os | 7.0.4 |
| Apple | Iphone Os | 7.0.5 |
| Apple | Iphone Os | 7.0.6 |
| Apple | Tvos | <= 6.1 |
| Apple | Tvos | 6.0 |
| Apple | Tvos | 6.0.1 |
| Apple | Tvos | 6.0.2 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2014-1320?
How severe is CVE-2014-1320?
How do I fix CVE-2014-1320?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2014
- CVE-2014-1314WindowServer in Apple OS X through 10.9.2 does not prevent s…
- CVE-2014-1315Format string vulnerability in CoreServicesUIAgent in Apple …
- CVE-2014-1316Heimdal, as used in Apple OS X through 10.9.2, allows remote…
- CVE-2014-1317iBooks Commerce in Apple OS X before 10.9.4 places Apple ID …
- CVE-2014-1318The Intel Graphics Driver in Apple OS X through 10.9.2 does …
- CVE-2014-1319Buffer overflow in ImageIO in Apple OS X 10.9.x through 10.9…
- CVE-2014-1321Power Management in Apple OS X 10.9.x through 10.9.2 allows …
- CVE-2014-1322The kernel in Apple OS X through 10.9.2 places a kernel poin…
- CVE-2014-1323WebKit, as used in Apple Safari before 6.1.4 and 7.x before …
- CVE-2014-1324WebKit, as used in Apple Safari before 6.1.4 and 7.x before …
- CVE-2014-1325WebKit, as used in Apple iOS before 7.1.2, Apple Safari befo…
- CVE-2014-1326WebKit, as used in Apple Safari before 6.1.4 and 7.x before …
Are you affected by CVE-2014-1320?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST