VYPR
← All advisories
Unrated severityNVD Advisory· Published May 18, 2014· Updated Jun 17, 2026

CVE-2014-1347

CVE-2014-1347

Description

Apple iTunes before 11.2.1 on OS X sets world-writable permissions for /Users and /Users/Shared during reboots, which allows local users to modify files, and consequently obtain access to arbitrary user accounts, via standard filesystem operations.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

14
  • Apple Inc./iTunes14 versions
    cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*+ 13 more
    • cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*range: <=11.2
    • cpe:2.3:a:apple:itunes:11.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:11.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:11.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:11.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:11.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:11.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:11.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:11.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:11.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:11.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:11.1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:11.1.5:*:*:*:*:*:*:*
    • (no CPE)range: <11.2.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.