Lucene search
HistoryJul 01, 2014 - 10:17 a.m.
CVE-2014-1371
cve-2014-1371
array index error
apple os x
arbitrary code execution
sandboxed application
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
Low
0.052 Low
EPSS
Percentile
93.0%
Array index error in Dock in Apple OS X before 10.9.4 allows attackers to execute arbitrary code or cause a denial of service (incorrect function-pointer dereference and application crash) by leveraging access to a sandboxed application for sending a message.
Affected configurations
Node
applemac_os_xRange≤10.9.3
ORapplemac_os_xMatch10.7.0
ORapplemac_os_xMatch10.7.1
ORapplemac_os_xMatch10.7.2
ORapplemac_os_xMatch10.7.3
ORapplemac_os_xMatch10.7.4
ORapplemac_os_xMatch10.7.5
ORapplemac_os_xMatch10.8.0
ORapplemac_os_xMatch10.8.1
ORapplemac_os_xMatch10.8.2
ORapplemac_os_xMatch10.8.3
ORapplemac_os_xMatch10.8.4
ORapplemac_os_xMatch10.8.5
ORapplemac_os_xMatch10.8.5supplemental_update
ORapplemac_os_xMatch10.9
ORapplemac_os_xMatch10.9.1
ORapplemac_os_xMatch10.9.2
ORapplemac_os_x_serverMatch10.7.0
ORapplemac_os_x_serverMatch10.7.1
ORapplemac_os_x_serverMatch10.7.2
ORapplemac_os_x_serverMatch10.7.3
ORapplemac_os_x_serverMatch10.7.4
ORapplemac_os_x_serverMatch10.7.5
Related
prion
prion
Null pointer dereference
2014-07-01 10:17:00
nvd
nvd
CVE-2014-1371
2014-07-01 10:17:27
zdi
zdi
Apple OS X Dock Service Sandbox Escape Vulnerability
2014-07-18 00:00:00
cvelist
cvelist
CVE-2014-1371
2014-07-01 10:00:00
openvas
openvas
Apple Mac OS X Multiple Vulnerabilities -03 (Sep 2014)
2014-09-19 00:00:00
nessus
nessus
Mac OS X Multiple Vulnerabilities (Security Update 2014-003)
2014-07-01 00:00:00
Mac OS X 10.9.x < 10.9.4 Multiple Vulnerabilities
2014-07-01 00:00:00
securityvulns
securityvulns
Apple Mac OS X multiple security vulnerabilities
2014-08-04 00:00:00
APPLE-SA-2014-06-30-2 OS X Mavericks 10.9.4 and Security Update 2014-003
2014-08-04 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
Low
0.052 Low
EPSS
Percentile
93.0%
Related for CVE-2014-1371