PT-2015-1777

Name of the Vulnerable Software and Affected Versions libxpc in Apple iOS versions prior to 8.4.1 libxpc in Apple OS X versions prior to 10.10.5 Description The issue is caused by a buffer overflow in the libxpc component of iOS and Mac OS X operating systems. This can be exploited by a remote...

CVE-2014-8835

The xpcdatagetbytes function in libxpc in Apple OS X before 10.10.2 does not verify that a dictionary's Attributes key has the xpcdata data type, which allows attackers to execute arbitrary code by providing a crafted dictionary to sysmond, related to an "XPC type confusion" issue...

CVE-2014-8835

CVE-2014-8835 affects Apple OS X prior to 10.10.2, where libxpc’s xpc_data_get_bytes does not verify the data type of a dictionary’s Attributes key, enabling a type-confusion path via crafted dictionaries to sysmond that can lead to arbitrary code execution. The documented impact is local to OS X...

CVE-2014-8835

The xpcdatagetbytes function in libxpc in Apple OS X before 10.10.2 does not verify that a dictionary's Attributes key has the xpcdata data type, which allows attackers to execute arbitrary code by providing a crafted dictionary to sysmond, related to an "XPC type confusion" issue...

PT-2015-4101

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.10.2 Description The issue is related to an "XPC type confusion" problem in the xpc data get bytes function within the libxpc library. This function does not properly verify the data type of a dictionary's...

CVE-2014-8835: Undefined Security Weakness

The xpcdatagetbytes function in libxpc in Apple OS X before 10.10.2 does not verify that a dictionary's Attributes key has the xpcdata data type, which allows attackers to execute arbitrary code by providing a crafted dictionary to sysmond, related to an "XPC type confusion" issue...