Lucene search

K
cve[email protected]CVE-2014-1256
HistoryFeb 27, 2014 - 1:55 a.m.

CVE-2014-1256

2014-02-2701:55:03
CWE-119
web.nvd.nist.gov
24
cve-2014-1256
buffer overflow
apple type services
ats
apple os x
app sandbox
mach messages

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.3 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.3%

Buffer overflow in Apple Type Services (ATS) in Apple OS X before 10.9.2 allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages.

Affected configurations

NVD
Node
applemac_os_xRange10.9.1
OR
applemac_os_xMatch10.7.0
OR
applemac_os_xMatch10.7.1
OR
applemac_os_xMatch10.7.2
OR
applemac_os_xMatch10.7.3
OR
applemac_os_xMatch10.7.4
OR
applemac_os_xMatch10.7.5
OR
applemac_os_xMatch10.8.0
OR
applemac_os_xMatch10.8.1
OR
applemac_os_xMatch10.8.2
OR
applemac_os_xMatch10.8.3
OR
applemac_os_xMatch10.8.4
OR
applemac_os_xMatch10.8.5
OR
applemac_os_xMatch10.8.5supplemental_update
OR
applemac_os_xMatch10.9
OR
applemac_os_x_serverMatch10.7.0
OR
applemac_os_x_serverMatch10.7.1
OR
applemac_os_x_serverMatch10.7.2
OR
applemac_os_x_serverMatch10.7.3
OR
applemac_os_x_serverMatch10.7.4
OR
applemac_os_x_serverMatch10.7.5

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.3 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.3%