Patchwire CVEs, their patch status, and feeds to follow them

CVE-2014-1370

No fix known EPSS 2%

The byte-swapping implementation in copyfile in Apple OS X before 10.9.4 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds memory access and application crash) via a crafted AppleDouble file in a ZIP archive.

Published 2014-07-01 · CVE record · OSV

Products: apple mac_os_x, apple mac_os_x_server