PT-2014-4096
CVE-2014-1314
·
تاريخ النشر
2014-04-23
·
تاريخ التحديث
2014-12-02
الوصف من
CVSS 2.0
10
عاليةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Apple OS X versions through 10.9.2
Description
The issue allows attackers to bypass the sandbox protection mechanism and execute arbitrary code via a crafted application, as the WindowServer in Apple OS X does not prevent session creation by a sandboxed application.
Recommendations
For Apple OS X versions through 10.9.2, update to a version that contains a fix for this issue to prevent attackers from bypassing the sandbox protection mechanism.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾