CVE-2014-8835 in Mac OS X
Zusammenfassung (Englisch)
The xpc_data_get_bytes function in libxpc in Apple OS X before 10.10.2 does not verify that a dictionary's Attributes key has the xpc_data data type, which allows attackers to execute arbitrary code by providing a crafted dictionary to sysmond, related to an "XPC type confusion" issue.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservieren
14.11.2014
Veröffentlichung
30.01.2015
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 69012 | Apple Mac OS X sysmond Local Privilege Escalation | 19 | Proof-of-Concept | Unavailable | CVE-2014-8835 |
| 68916 | Apple Mac OS X sysmond | 19 | Proof-of-Concept | Offizieller Fix | CVE-2014-8835 |