Summaryinfo

A vulnerability described as critical has been identified in Apple Mac OS X 10.8.5/10.9.5/10.10/10.10.1. The impacted element is an unknown function of the component FontParser. Executing a manipulation can lead to data processing. This vulnerability appears as CVE-2014-4484. There is no available exploit. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability classified as critical was found in Apple Mac OS X 10.8.5/10.9.5/10.10/10.10.1 (Operating System). This vulnerability affects an unknown code block of the component FontParser. The manipulation with an unknown input leads to a data processing vulnerability. The CWE definition for the vulnerability is CWE-19. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

FontParser in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .dfont file.

The weakness was presented 01/27/2015 by Gaurav Baruah as HT204244 as confirmed advisory (Website). The advisory is available at support.apple.com. This vulnerability was named CVE-2014-4484 since 06/20/2014. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. The technical details are unknown and an exploit is not available. The advisory points out:

A memory corruption issue existed in the handling of .dfont files. This issue was addressed through improved bounds checking.

The vulnerability scanner Nessus provides a plugin with the ID 81145 (Apple TV < 7.0.3 Multiple Vulnerabilities), which helps to determine the existence of the flaw in a target environment. It is assigned to the family Misc.. The commercial vulnerability scanner Qualys is able to test this issue with plugin 123193 (Apple Mac OS X v10.10.2 and Security Update 2015-001 Not Installed (APPLE-SA-2015-01-27-4)).

Upgrading to version 10.10.2 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (81145). Additional details are provided at us-cert.gov. See VDB-67778, VDB-67996, VDB-68077 and VDB-68232 for similar entries. Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Operating System

Vendor

• Apple

Name

• Mac OS X

Version

• 10.8.5
• 10.9.5
• 10.10
• 10.10.1

License

• commercial

Support

• end of life

Website

• Vendor: https://www.apple.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion