Apple Products (OS X, Safari, iOS and Apple TV) Multiple Vulnerabilities

Impact

• Remote Code Execution
• Security Restriction Bypass

System / Technologies affected

• OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, and OS X Yosemite v10.10 and v10.10.1
• iPhone 4s and later, iPod touch 5th generation and later, and iPad 2 and later
• Apple TV 3rd generation and later

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

• The vendor has issued a fix (OS X v10.10.2, Security Update 2015-001, Safari 8.0.3, Safari 7.1.3, Safari 6.2.3, iOS 8.1.3, Apple TV 7.0.3).

Vulnerability Identifier

• CVE-2014-3192
• CVE-2014-4476
• CVE-2014-4477
• CVE-2014-4479
• CVE-2014-4481
• CVE-2014-4483
• CVE-2014-4484
• CVE-2014-4485
• CVE-2014-4487
• CVE-2014-4488
• CVE-2014-4489
• CVE-2014-4491
• CVE-2014-4495
• CVE-2014-4497
• CVE-2014-4498
• CVE-2014-4499
• CVE-2014-8816
• CVE-2014-8817
• CVE-2014-8819
• CVE-2014-8820
• CVE-2014-8821
• CVE-2014-8822
• CVE-2014-8823
• CVE-2014-8824
• CVE-2014-8825
• CVE-2014-8826
• CVE-2014-8827
• CVE-2014-8828
• CVE-2014-8829
• CVE-2014-8830
• CVE-2014-8831
• CVE-2014-8832
• CVE-2014-8833
• CVE-2014-8834
• CVE-2014-8835
• CVE-2014-8837
• CVE-2014-8838
• CVE-2014-4480
• CVE-2014-4493
• CVE-2014-4494
• CVE-2014-4496
• CVE-2014-8840

Source

• US-CERT

Related Link

• https://www.us-cert.gov/ncas/current-activity/2015/01/27/Apple-Releases-Security-Updates-OS-X-Safari-iOS-and-Apple-TV