CVE-2014-4383
EUVD-2014-431018.09.2014, 10:55
The Assets subsystem in Apple iOS before 8 and Apple TV before 7 allows man-in-the-middle attackers to spoof a device's update status via a crafted Last-Modified HTTP response header.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apple | iphone_os | 𝑥 ≤ 7.1.2 |
| apple | iphone_os | 7.0 |
| apple | iphone_os | 7.0.1 |
| apple | iphone_os | 7.0.2 |
| apple | iphone_os | 7.0.3 |
| apple | iphone_os | 7.0.4 |
| apple | iphone_os | 7.0.5 |
| apple | iphone_os | 7.0.6 |
| apple | iphone_os | 7.1 |
| apple | iphone_os | 7.1.1 |
| apple | tvos | 𝑥 ≤ 6.2 |
| apple | tvos | 6.0 |
| apple | tvos | 6.0.1 |
| apple | tvos | 6.0.2 |
| apple | tvos | 6.1 |
| apple | tvos | 6.1.1 |
| apple | tvos | 6.1.2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References