CVE-2014-8611
EUVD-2014-844818.09.2015, 10:59
The __sflush function in fflush.c in stdio in libc in FreeBSD 10.1 and the kernel in Apple iOS before 9 mishandles failures of the write system call, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted application.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apple | iphone_os | 𝑥 ≤ 8.4.1 |
| freebsd | freebsd | 10.1 |
| apple | mac_os_x | 𝑥 ≤ 10.10.5 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References