NetSight
critical10.0

CVE-2014-1314

WindowServer in Apple OS X through 10.9.2 does not prevent session creation by a sandboxed application, which allows attackers to bypass the sandbox protection…

Impact

WindowServer in Apple OS X through 10.9.2 does not prevent session creation by a sandboxed application, which allows attackers to bypass the sandbox protection mechanism and execute arbitrary code via a crafted application.

Affected products

VendorProductAffected versions
AppleMac Os X
through 10.9.2
Versions 10.9, 10.9.1, 10.8.0, 10.8.1, 10.8.2

Weakness classification

References