Multiple security vulnerabilities in Apple iOS and TV

Release date:
Updated on:

Affected Systems:
Apple Television 5.0
Apple Television 4.4
Apple Television 4.3
Apple Television 4.2
Apple Television 4.1
Apple Television 4.0
Apple Television 2.1
Apple iOS <7.1
Description:
--------------------------------------------------------------------------------
Bugtraq id: 66089
CVE (CAN) ID: CVE-2014-1267, CVE-2014-1271, CVE-2014-1273, CVE-2014-1272, CVE-2014-1275, CVE-2014-1278, CVE-2014-1280, CVE-2014-1282

IOS is an operating system developed by Apple for mobile devices. It supports iPhone, iPod touch, iPad, and Apple TV. Apple TV is a digital multi-media machine designed, marketed, and sold by Apple.

In versions earlier than iOS 7.1, multiple security vulnerabilities exist. Attackers can exploit these vulnerabilities to perform man-in-the-middle attacks, access arbitrary files, obtain unauthorized access permissions, bypass security restrictions, and perform other attacks.

<* Source: Apple

Link: http://support.apple.com/kb/HT1222
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Apple
-----
Apple has released a Security Bulletin (APPLE-SA-2014-03-10-1) and patches for this:
APPLE-SA-2014-03-10-1: iOS 7.1
Link: http://support.apple.com/kb/HT1222