Apple Mac OS X CVE-2013-1032 Memory Corruption Vulnerability

Bugtraq ID:	62375
Class:	Unknown
CVE:	CVE-2013-1032
Remote:	Yes
Local:	No
Published:	Sep 12 2013 12:00AM
Updated:	Sep 12 2013 12:00AM
Credit:	Jason Kratzer working with iDefense VCP
Vulnerable:	Apple Mac Os X Server 10.6.8
Not Vulnerable:

Apple Mac OS X CVE-2013-1032 Memory Corruption Vulnerability

Apple Mac OS X is prone to a remote memory-corruption vulnerability.

The issue arises when the application handles a specially crafted file.

Successful exploits may allow attackers to execute arbitrary code in the context of the affected application; failed exploit attempts will cause denial-of-service conditions.

The following versions are vulnerable:

Mac OS X 10.6.8, 10.7.5 and 10.8 through 10.8.4
Mac OS X Server 10.6.8 and 10.7.5

Apple Mac OS X CVE-2013-1032 Memory Corruption Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apple Mac OS X CVE-2013-1032 Memory Corruption Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Apple Mac OS X CVE-2013-1032 Memory Corruption Vulnerability

References:

• Mac OS X Homepage (Apple)