CVE-2014-1252

Опубликовано: 24 янв. 2014

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Double free vulnerability in Apple Pages 2.x before 2.1 and 5.x before 5.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Microsoft Word file.

Ссылки

http://osvdb.org/102460
Broken Link
http://secunia.com/advisories/56615
Permissions Required
http://secunia.com/advisories/56630
Permissions Required
http://support.apple.com/kb/HT6117
Vendor Advisory
http://support.apple.com/kb/HT6150
Vendor Advisory
http://support.apple.com/kb/HT6162
Vendor Advisory
http://www.securityfocus.com/bid/65113
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1029683
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/90672
http://osvdb.org/102460
Broken Link
http://secunia.com/advisories/56615
Permissions Required
http://secunia.com/advisories/56630
Permissions Required
http://support.apple.com/kb/HT6117
Vendor Advisory
http://support.apple.com/kb/HT6150
Vendor Advisory
http://support.apple.com/kb/HT6162
Vendor Advisory
http://www.securityfocus.com/bid/65113
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1029683
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/90672

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apple:pages:2.0:*:*:*:*:*:*:*

cpe:2.3:a:apple:pages:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:apple:pages:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:apple:pages:5.0:*:*:*:*:*:*:*

cpe:2.3:a:apple:pages:5.0.1:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Версия до 10.9.1 (включая)

Конфигурация 3

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 7.0 (включая)

EPSS

Процентиль: 88%

0.04116

Низкий

7.5 High

CVSS2

Дефекты

CWE-415

Связанные уязвимости

GHSA-w23x-qg88-3f6r

github

больше 3 лет назад