CVE-2014-1319

CVE-2014-1319 is a real vulnerability in Apple's ImageIO component on OS X 10.9.x up to 10.9.2. A buffer overflow in ImageIO's JPEG handling could allow a remote attacker to execute arbitrary code or cause an application crash (DoS) via a crafted JPEG image. Affected products: Mac OS X (Mavericks...

CVE-2014-1316

CVE-2014-1316 affects Apple OS X up to 10.9.2, where Heimdal Kerberos (as used in OS X) is vulnerable. A remote attacker can trigger denial of service by sending crafted ASN.1 data in Kerberos 5, causing an abort and daemon exit. The Apple Security Update 2014-002 (Security Update 2014-002) conta...

CVE-2014-1315

CVE-2014-1315 affects CoreServicesUIAgent in OS X 10.9.x up to 10.9.2. It is a format-string vulnerability in URL handling that could allow remote code execution or cause a denial of service (application crash). Root cause is a format string issue in the handling of URLs. Apple Security Update 20...

CVE-2014-1296

CFNetwork in iOS before 7.1.1, OS X up to 10.9.2, and Apple TV before 6.1.1 mishandles incomplete Set-Cookie headers, allowing a remote attacker to bypass access restrictions by closing the TCP connection during header transmission (HTTPOnly). Public fix/version not specified in the provided docu...

CVE-2014-1318

CVE-2014-1318 affects the Intel Graphics Driver in Apple OS X up to 10.9.2. The root cause is a validation flaw for a pointer from userspace, allowing a crafted application to execute arbitrary code (as described in multiple sources). The vulnerability is mapped to an in-the-wild risk as high/rem...

CVE-2014-1318

The Intel Graphics Driver in Apple OS X through 10.9.2 does not properly validate a certain pointer, which allows attackers to execute arbitrary code via a crafted application...

CVE-2014-1320

IOKit in Apple iOS before 7.1.1, Apple OS X through 10.9.2, and Apple TV before 6.1.1 places kernel pointers into an object data structure, which makes it easier for local users to bypass the ASLR protection mechanism by reading unspecified attributes of the object...

CVE-2014-1322

CVE-2014-1322 affects Apple OS X/macOS kernel (XNU) up to 10.9.2: a kernel pointer stored in a XNU object can be read from user space, enabling local bypass of ASLR. The vulnerability is addressed in Security Update 2014-002; Apple notes CVE-2014-1322 among the patched components. Reported exploi...

CVE-2014-1321

Power Management in Apple OS X 10.9.x through 10.9.2 allows physically proximate attackers to bypass an intended transition into the locked-screen state by touching 1 a key or 2 the trackpad during a lid-close action...

CVE-2014-2234

A certain Apple patch for OpenSSL in Apple OS X 10.9.2 and earlier uses a Trust Evaluation Agent TEA feature without terminating certain TLS/SSL handshakes as specified in the SSLCTXsetverify callback function's documentation, which allows remote attackers to bypass extra verification within a...

CVE-2014-1264

Finder in Apple OS X before 10.9.2 does not ensure ACL integrity after the viewing of file ACL information, which allows local users to bypass intended access restrictions in opportunistic circumstances via standard filesystem operations on a file with a damaged ACL...

CVE-2014-1259

Buffer overflow in File Bookmark in Apple OS X before 10.9.2 allows attackers to execute arbitrary code or cause a denial of service application crash via a crafted filename...

CVE-2014-1261

Integer signedness error in CoreText in Apple OS X before 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted Unicode font...

CVE-2014-1256

Buffer overflow in Apple Type Services ATS in Apple OS X before 10.9.2 allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages...

CVE-2014-1257

CFNetwork in Apple OS X through 10.8.5 does not remove session cookies upon a Safari reset action, which allows physically proximate attackers to bypass intended access restrictions by leveraging an unattended workstation...

Code injection

curl and libcurl 7.27.0 through 7.35.0, when using the SecureTransport/Darwinssl backend, as used in in Apple OS X 10.9.x before 10.9.2, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate when accessing a...

Design/Logic Flaw

Apple Type Services ATS in Apple OS X before 10.9.2 does not properly validate calls to the free function, which allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages...

Heap overflow

Heap-based buffer overflow in CoreAnimation in Apple OS X before 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted image...

Integer overflow

Integer signedness error in CoreText in Apple OS X before 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted Unicode font...

Memory corruption

Apple Type Services ATS in Apple OS X before 10.9.2 allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages that trigger memory corruption...