2157 matches found
CVE-2014-4483
The CVE is confirmed: CVE-2014-4483 affects Apple FontParser in PDF handling on Apple iOS before 8.1.3, OS X before 10.10.2, and Apple TV before 7.0.3. Root cause is a buffer/bounds-related issue in FontParser when processing font data inside PDFs, enabling a crafted font file to trigger a buffer...
CVE-2014-4487
Buffer overflow in IOHIDFamily in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 allows attackers to execute arbitrary code in a privileged context via a crafted app...
CVE-2014-8827
LoginWindow in Apple OS X before 10.10.2 does not transition to the lock-screen state immediately upon being woken from sleep, which allows physically proximate attackers to obtain sensitive information by reading the screen...
CVE-2014-8830
Heap-based buffer overflow in SceneKit in Apple OS X before 10.10.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted accessor element in a Collada file...
CVE-2014-8819
The Intel Graphics Driver in Apple OS X before 10.10.2 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2014-8820 and CVE-2014-8821...
CVE-2014-8816
CVE-2014-8816 affects Apple OS X CoreGraphics. A crafted PDF could trigger memory corruption, leading to remote code execution or an application crash. The issue is fixed in OS X 10.10.2 and Security Update 2015-001; apply the Yosemite 10.10.2 update or the corresponding security update to mitiga...
CVE-2014-8828
CVE-2014-8828 : In Apple OS X before 10.10, a sandboxing design flaw allows a sandboxed app that references a path containing a com.apple.sandbox segment to write to the sandbox-profile cache. The issue arises from how the sandbox cache is accessed by such apps, enabling partial confidentiality a...
CVE-2014-8816
CoreGraphics in Apple OS X before 10.10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted PDF document...
CVE-2014-8828
Sandbox in Apple OS X before 10.10 allows attackers to write to the sandbox-profile cache via a sandboxed app that includes a com.apple.sandbox segment in a path...
CVE-2014-4487
Affected products include Apple iOS, OS X, and Apple TV, with CVE-2014-4487 in IOHIDFamily. The issue is a buffer overflow in IOHIDFamily that allows arbitrary code execution in a privileged context. Apple references indicate updates: iOS 8.1.3, OS X 10.10.2, and Apple TV 7.0.3, addressing the vu...
CVE-2014-8825
The CVE-2014-8825 entry concerns Apple OS X Kernel: identitysvc validation in the directory-service resolving process. The issue, described in the kernel as a validation failure within identitysvc, could allow a local attacker to elevate privileges or spoof directory-service responses. Affected i...
CVE-2014-8824
The kernel in Apple OS X before 10.10.2 does not properly validate IODataQueue object metadata fields, which allows attackers to execute arbitrary code in a privileged context via a crafted app...
CVE-2014-8839
CVE-2014-8839 affects Apple Mac OS X Spotlight ( Mail integration ) prior to OS X 10.10.2. Root cause: Spotlight did not enforce Mail’s "Load remote content in messages" setting, allowing an HTML email containing an external image to reveal the recipient’s IP address by logging the image URL’s HT...
CVE-2014-8817
CVE-2014-8817 affects CoreSymbolicationd in CoreSymbolication on macOS up to OS X 10.10.1. The flaw is improper verification of data types in XPC messages, specifically during handling of commands (match_mmap_archives, delete_mmap_archives, write_mmap_archive, read_mmap_archive), due to missing v...
CVE-2014-4492
CVE-2014-4492 involves a type confusion vulnerability in libnetcore affecting Apple devices (iOS before 8.1.3, OS X before 10.10.2, Apple TV before 7.0.3) where an attacker can craft an XPC message to sandboxed applications to trigger arbitrary code execution in the networkd context. The root cau...
CVE-2014-8837
Multiple unspecified vulnerabilities in the Bluetooth driver in Apple OS X before 10.10.2 allow attackers to execute arbitrary code in a privileged context via a crafted app...
CVE-2014-8821
Affected component: Intel graphics driver in macOS (Apple OS X) prior to 10.10.2. Issue: local privilege escalation via unspecified vectors. Root cause, affected versions, and a remediation are not detailed in the provided documents.
CVE-2014-8821
The Intel Graphics Driver in Apple OS X before 10.10.2 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2014-8819 and CVE-2014-8820...
EUVD-2014-4419
libnetcore in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not verify that certain values have the expected data type, which allows attackers to execute arbitrary code in an networkd context via a crafted XPC message from a sandboxed app, as demonstrated by la...