CVE-2014-1314
Severity CVSS v4.0:
Pending analysis
Type:
CWE-264
Permissions, Privileges, and Access Control
Publication date:
23/04/2014
Last modified:
24/04/2014
Description
WindowServer in Apple OS X through 10.9.2 does not prevent session creation by a sandboxed application, which allows attackers to bypass the sandbox protection mechanism and execute arbitrary code via a crafted application.
Impact
Base Score 2.0
10.00
Severity 2.0
HIGH
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* | 10.9.2 (including) | |
cpe:2.3:o:apple:mac_os_x:10.9:*:*:*:*:*:*:* | ||
cpe:2.3:o:apple:mac_os_x:10.9.1:*:*:*:*:*:*:* | ||
cpe:2.3:o:apple:mac_os_x:10.8.0:*:*:*:*:*:*:* | ||
cpe:2.3:o:apple:mac_os_x:10.8.1:*:*:*:*:*:*:* | ||
cpe:2.3:o:apple:mac_os_x:10.8.2:*:*:*:*:*:*:* | ||
cpe:2.3:o:apple:mac_os_x:10.8.3:*:*:*:*:*:*:* | ||
cpe:2.3:o:apple:mac_os_x:10.8.4:*:*:*:*:*:*:* | ||
cpe:2.3:o:apple:mac_os_x:10.8.5:*:*:*:*:*:*:* | ||
cpe:2.3:o:apple:mac_os_x:10.8.5:supplemental_update:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page