Design/Logic Flaw

App Sandbox in Apple OS X before 10.10 allows attackers to bypass a sandbox protection mechanism via the accessibility API...

CVE-2014-4427

CVE-2014-4427 affects Apple OS X prior to 10.10, where App Sandbox could be bypassed via the accessibility API. Root cause: a sandbox mechanism weakness allowing a sandboxed app to misuse accessibility without user knowledge. Impact: sandbox protection bypass for affected apps. Remediation: Apple...

CVE-2014-4427

App Sandbox in Apple OS X before 10.10 allows attackers to bypass a sandbox protection mechanism via the accessibility API...

APPLE-SA-2014-10-16-1 OS X Yosemite v10.10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-10-16-1 OS X Yosemite v10.10 OS X Yosemite v10.10 is now available and addresses the following: 802.1X Impact: An attacker can obtain WiFi credentials Description: An attacker could have impersonated a WiFi access point, offered to...

Mac OS X < 10.10 Multiple Vulnerabilities (POODLE) (Shellshock)

The remote host is running a version of Mac OS X is prior to version 10.10. This update contains several security-related fixes for the following components : - 802.1X - AFP File Server - apache - App Sandbox - Bash - Bluetooth - Certificate Trust Policy - CFPreferences - CoreStorage - CUPS - Doc...

APPLE-SA-2014-02-25-1 OS X Mavericks 10.9.2 and Security Update 2014-001

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-02-25-1 OS X Mavericks 10.9.2 and Security Update 2014-001 OS X Mavericks 10.9.2 and Security Update 2014-001 is now available and addresses the following: Apache Available for: OS X Lion v10.7.5, OS X Lion Server v10.7.5, OS X Mountain...

CVE-2014-1262

Apple Type Services ATS in Apple OS X before 10.9.2 allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages that trigger memory corruption...

CVE-2014-1256

Buffer overflow in Apple Type Services ATS in Apple OS X before 10.9.2 allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages...

CVE-2014-1255

Apple Type Services ATS in Apple OS X before 10.9.2 does not properly validate calls to the free function, which allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages...

Design/Logic Flaw

Apple Type Services ATS in Apple OS X before 10.9.2 does not properly validate calls to the free function, which allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages...

Memory corruption

Apple Type Services ATS in Apple OS X before 10.9.2 allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages that trigger memory corruption...

Buffer overflow

Buffer overflow in Apple Type Services ATS in Apple OS X before 10.9.2 allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages...

CVE-2014-1262

CVE-2014-1262 affects Apple OS X: the Type Services (ATS) component in Mavericks (10.9/10.9.1) has a memory corruption flaw in the handling of Mach messages that can bypass the App Sandbox. The issue was addressed by Apple in Security Update 2014-001 (OS X 10.9.2 and beyond). Connected sources co...

CVE-2014-1255

CVE-2014-1255 affects Apple Type Services (ATS) on macOS OS X versions prior to 10.9.2. The root issue is improper validation of calls to the free function when handling Mach messages, allowing an attacker to bypass the App Sandbox protection. The vulnerability enables sandbox bypass via crafted ...

CVE-2014-1256

Buffer overflow in Apple Type Services ATS in Apple OS X before 10.9.2 allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages...

CVE-2014-1256

Apple OS X ATS memory corruption issue tracked as CVE-2014-1256: a buffer/ memory corruption in Apple Type Services that could allow bypassing App Sandbox via crafted Mach messages. Affects OS X versions up to 10.9.2 (including Mavericks prior to 10.9.2). Root cause: bounds checking/memory handli...

CVE-2014-1262

Apple Type Services ATS in Apple OS X before 10.9.2 allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages that trigger memory corruption...

Sandbox Escape: OSX ATS memory corruption may lead to App Sandbox bypass

This issue was reported directly to Apple and has been resolved in OSX Security Update 2014-001. http://support.apple.com/kb/HT6150 Available for: OS X Mavericks 10.9 and 10.9.1 Impact: The App Sandbox may be bypassed Description: A memory corruption issue existed in the handling of Mach messages...

Mac OS X Multiple Vulnerabilities (Security Update 2014-001) (BEAST)

The remote host is running a version of Mac OS X 10.7 or 10.8 that does not have Security Update 2014-001 applied. This update contains several security-related fixes for the following components : - Apache - App Sandbox - ATS - Certificate Trust Policy - CFNetwork Cookies - CoreAnimation - Date...

Design/Logic Flaw

App Sandbox in Apple Mac OS X before 10.9 allows attackers to bypass intended sandbox restrictions via a crafted app that uses the LaunchServices interface to specify process arguments...