NetSight
IP …
medium6.8

CVE-2014-1370

The byte-swapping implementation in copyfile in Apple OS X before 10.9.4 allows remote attackers to execute arbitrary code or cause a denial of service (out-of…

Impact

The byte-swapping implementation in copyfile in Apple OS X before 10.9.4 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds memory access and application crash) via a crafted AppleDouble file in a ZIP archive.

Affected products

VendorProductAffected versions
AppleMac Os X
through 10.9.3
Versions 10.7.0, 10.7.1, 10.7.2, 10.7.3, 10.7.4
AppleMac Os X Server
Versions 10.7.0, 10.7.1, 10.7.2, 10.7.3, 10.7.4, 10.7.5

Weakness classification

CWE-119

References