Unscored CVE-2014-4480 EUVD-2014-4407GHSA-9r34-x38v-77c4

Directory traversal vulnerability in afc in AppleFileConduit in Apple iOS before 8.1.3 and Apple TV before 7.0.3 allows attackers to access…

Published Jan 30, 2015 · Updated Aug 6, 2024 · Assigned by apple

Description

Directory traversal vulnerability in afc in AppleFileConduit in Apple iOS before 8.1.3 and Apple TV before 7.0.3 allows attackers to access unintended filesystem locations by creating a symlink.

References

http://support.apple.com/HT204245
http://support.apple.com/HT204246
72334 vdb-entry
APPLE-SA-2015-01-27-2 vendor-advisory
1031652 vdb-entry
APPLE-SA-2015-01-27-1 vendor-advisory