CVEvulnerability
CVE-2014-1354
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-07-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-399
Description
CoreGraphics in Apple iOS before 7.1.2 does not properly restrict allocation of stack memory for processing of XBM images, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted image data.
Affected configurations
• apple iphone os (<= 7.1.1)
• apple iphone os 7.0
• apple iphone os 7.0.1
• apple iphone os 7.0.2
• apple iphone os 7.0.3
• apple iphone os 7.0.4
• apple iphone os 7.0.5
• apple iphone os 7.0.6
• apple iphone os 7.1
Related
Weakness · not in database (1)
References
- http://archives.neohapsis.com/archives/bugtraq/2014-06/0174.html archives.neohapsis.com
- http://www.securityfocus.com/bid/68276 www.securityfocus.com
- http://www.securitytracker.com/id/1030500 www.securitytracker.com
- http://archives.neohapsis.com/archives/bugtraq/2014-06/0174.html archives.neohapsis.com
- http://www.securityfocus.com/bid/68276 www.securityfocus.com
- http://www.securitytracker.com/id/1030500 www.securitytracker.com