CVE-2014-1272

Apple iOS < 7.1 and tvOS < 6.1 - Arbitrary File Permission Change via Symlink in CrashHouseKeeping

Title source: llm

Description

CrashHouseKeeping in Crash Reporting in Apple iOS before 7.1 and Apple TV before 6.1 allows local users to change arbitrary file permissions by leveraging a symlink.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_confirm

http://support.apple.com/kb/HT6163

Vendor Advisory x_refsource_confirm

http://support.apple.com/kb/HT6162

Scores

EPSS 0.0035

EPSS Percentile 26.4%

Details

CWE

CWE-59

Status published

Products (10)

apple/iphone_os 7.0

apple/iphone_os 7.0.1

apple/iphone_os 7.0.2

apple/iphone_os 7.0.3

apple/iphone_os 7.0.4

apple/iphone_os 7.0.5

apple/iphone_os < 7.0.6

apple/tvos 6.0

apple/tvos 6.0.1

apple/tvos < 6.0.2

Published Mar 14, 2014

Tracked Since Feb 18, 2026