VulnerabilityModified
CVE-2014-1275
Buffer overflow in ImageIO in Apple iOS before 7.1 and Apple TV before 6.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted JPEG2000 data in a PDF document.
MEDIUM 6.8EPSS 2.79%
Does this matter?
Lower severity and a low EPSS score (2.79%). Track it; it rarely justifies an emergency change on its own.
Description
Buffer overflow in ImageIO in Apple iOS before 7.1 and Apple TV before 6.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted JPEG2000 data in a PDF document.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 2.79% probability · 86th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- apple/iphone os · apple/tvos
- Source
- product-security@apple.com
References
- http://support.apple.com/kb/HT6162Vendor Advisory
- http://support.apple.com/kb/HT6163Vendor Advisory
- http://support.apple.com/kb/HT6162Vendor Advisory
- http://support.apple.com/kb/HT6163Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.