CVE-2014-1314

Name of the Vulnerable Software and Affected Versions Apple OS X versions through 10.9.2

Description The issue allows attackers to bypass the sandbox protection mechanism and execute arbitrary code via a crafted application, as the WindowServer in Apple OS X does not prevent session creation by a sandboxed application.

Recommendations For Apple OS X versions through 10.9.2, update to a version that contains a fix for this issue to prevent attackers from bypassing the sandbox protection mechanism.