PT-2015-3745
CVE-2014-4480
·
Published
2015-01-30
·
Updated
2019-03-08
Description by
CVSS 2.0
10
HighMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Apple iOS versions prior to 8.1.3
Apple TV versions prior to 7.0.3
Description
A directory traversal issue exists in the afc component of AppleFileConduit, allowing attackers to access unintended filesystem locations by creating a symlink.
Recommendations
For Apple iOS versions prior to 8.1.3, update to version 8.1.3 or later.
For Apple TV versions prior to 7.0.3, update to version 7.0.3 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾