CVE-2014-8611
18.09.2015, 10:59
The __sflush function in fflush.c in stdio in libc in FreeBSD 10.1 and the kernel in Apple iOS before 9 mishandles failures of the write system call, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted application.Enginsight
Vendor | Product | Version |
---|---|---|
apple | iphone_os | 𝑥 ≤ 8.4.1 |
freebsd | freebsd | 10.1 |
apple | mac_os_x | 𝑥 ≤ 10.10.5 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References