CVE-2014-1255

Apple Type Services (ATS) in Apple OS X before 10.9.2 does not properly validate calls to the free function, which allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages.

Score

CVSS 2.0 7.5 High

Status

Modified - product-security@apple.com

Published

2014-02-27

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Mac Os X (Apple)

References

• http://support.apple.com/kb/HT6150