CWE Code: 20
Vulnerability Type: privilege_escalation
CVSS Score: 9.3
CWE Name:  Improper Input Validation
Summary: the kernel in apple ios before 8.1.1 and apple tv before 7.0.2 does not properly validate ioshareddataqueue object metadata, which allows attackers to execute arbitrary code in a privileged context via a crafted application. per an <a href="http://support.apple.com/en-us/ht204244">apple security advisory</a> apple os x before versions 10.8.6, 10.9.6, 10.10.0 and 10.10.1 were also vulnerable.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2014-11-18
Last Modified Date: 2019-03-08