CVE-2014-1357
HighSummary
A heap-based buffer overflow in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application that generates log messages.
Risk Assessment
Attackers may gain full control over the system, posing a serious threat to data security and system integrity.
Recommendation
It is recommended to update systems to the latest versions to mitigate the risks associated with this vulnerability.
Other vulnerabilities in launchd
See all- CVE-2014-1358High
Integer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application.
- CVE-2014-1356High
A heap-based buffer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application that sends IPC messages.
Original NVD description (English source)
Heap-based buffer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application that generates log messages.