CVE-2014-1370
01.07.2014, 10:17
The byte-swapping implementation in copyfile in Apple OS X before 10.9.4 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds memory access and application crash) via a crafted AppleDouble file in a ZIP archive.Enginsight
| Vendor | Product | Version |
|---|---|---|
| apple | mac_os_x | 𝑥 ≤ 10.9.3 |
| apple | mac_os_x | 10.7.0 |
| apple | mac_os_x | 10.7.1 |
| apple | mac_os_x | 10.7.2 |
| apple | mac_os_x | 10.7.3 |
| apple | mac_os_x | 10.7.4 |
| apple | mac_os_x | 10.7.5 |
| apple | mac_os_x | 10.8.0 |
| apple | mac_os_x | 10.8.1 |
| apple | mac_os_x | 10.8.2 |
| apple | mac_os_x | 10.8.3 |
| apple | mac_os_x | 10.8.4 |
| apple | mac_os_x | 10.8.5 |
| apple | mac_os_x | 10.8.5:supplemental_update |
| apple | mac_os_x | 10.9 |
| apple | mac_os_x | 10.9.1 |
| apple | mac_os_x | 10.9.2 |
| apple | mac_os_x_server | 10.7.0 |
| apple | mac_os_x_server | 10.7.1 |
| apple | mac_os_x_server | 10.7.2 |
| apple | mac_os_x_server | 10.7.3 |
| apple | mac_os_x_server | 10.7.4 |
| apple | mac_os_x_server | 10.7.5 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References