PT-2014-5916
CVE-2014-4455
·
Published
2014-11-18
·
Updated
2019-03-08
Description by
CVSS 2.0
2.1
LowMetricsAV:L/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
dyld in Apple iOS versions prior to 8.1.1
dyld in Apple TV versions prior to 7.0.2
Description
The issue allows local users to bypass intended code-signing restrictions by using a crafted file that takes advantage of improper handling of overlapping segments in Mach-O executable files.
Recommendations
For Apple iOS versions prior to 8.1.1, update to version 8.1.1 or later to resolve the issue.
For Apple TV versions prior to 7.0.2, update to version 7.0.2 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾