Beveiligingsadvies

CVE-2014-1255

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2014-02-27 01:00:00
Laatst bijgewerkt 2024-08-06 09:34:41
Toegewezen door apple
CVSS-score geen score
Status PUBLISHED

Beschrijving

Apple Type Services (ATS) in Apple OS X before 10.9.2 does not properly validate calls to the free function, which allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages.