Unscored CVE-2014-4384 EUVD-2014-4311GHSA-47j5-xg3v-x546

Directory traversal vulnerability in the App Installation feature in Apple iOS before 8 allows local users to install unverified apps by tr…

Published Sep 18, 2014 · Updated Aug 6, 2024 · Assigned by apple

Description

Directory traversal vulnerability in the App Installation feature in Apple iOS before 8 allows local users to install unverified apps by triggering code-signature validation of an unintended bundle.

References

http://support.apple.com/kb/HT6441
1030866 vdb-entry
69940 vdb-entry
69882 vdb-entry
appleios-cve20144384-priv-esc(96087) vdb-entry
APPLE-SA-2014-09-17-1 vendor-advisory