high7.5
CVE-2014-1255
Apple Type Services (ATS) in Apple OS X before 10.9.2 does not properly validate calls to the free function, which allows attackers to bypass the App Sandbox p…
Impact
Apple Type Services (ATS) in Apple OS X before 10.9.2 does not properly validate calls to the free function, which allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Mac Os X | through 10.9.1 Version 10.9 |