CVE-2014-1356
HighSummary
A heap-based buffer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application that sends IPC messages.
Risk Assessment
This vulnerability poses a serious security risk, allowing attackers to remotely execute code, potentially leading to system takeover.
Recommendation
It is recommended to update systems to the latest versions to mitigate this vulnerability and to monitor applications sending IPC messages.
Other vulnerabilities in launchd
See all- CVE-2014-1358High
Integer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application.
- CVE-2014-1357High
A heap-based buffer overflow in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application that generates log messages.
Original NVD description (English source)
Heap-based buffer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application that sends IPC messages.