Apple Mac OS X APPLE-SA-2014-02-25-1 Multiple Security Vulnerabilities

Bugtraq ID:	65777
Class:	Unknown
CVE:	CVE-2014-1254 CVE-2014-1262 CVE-2014-1255 CVE-2014-1256 CVE-2014-1257 CVE-2014-1258 CVE-2014-1261 CVE-2014-1263 CVE-2014-1265 CVE-2014-1259 CVE-2014-1264 CVE-2014-1260 CVE-2014-1246 CVE-2014-1247 CVE-2014-1248 CVE-2014-1249 CVE-2014-1250 CVE-2014-1245
Remote:	Yes
Local:	Yes
Published:	Feb 25 2014 12:00AM
Updated:	Apr 17 2014 12:49AM
Credit:	Roland Moriz of Moriz GmbH, Felix Groebert of the Google Security Team, Meder Kydyraliev of the Google Security Team, Rob Ansaldo of Amherst College, Graham Bennett Karl Smith of NCC Group, Apple, Lucas Apa and Carlos Mario Penagos of IOActive Labs, Tom Ga
Vulnerable:	Slackware Linux 13.37 Slackware Linux 13.1 Slackware Linux 13.0
Not Vulnerable:

Apple Mac OS X APPLE-SA-2014-02-25-1 Multiple Security Vulnerabilities

Apple Mac OS X is prone to multiple vulnerabilities.

The update addresses new vulnerabilities that affect ATS, CFNetwork Cookies, CoreAnimation, CoreText, Date and Time, curl, QuickTime, QuickLook, Finder, and File Bookmark components.

Attackers can exploit these issues to execute arbitrary code, gain unauthorized access, bypass security restrictions, and perform other attacks. Failed attacks may cause denial-of-service conditions.

These issues affect OS X versions prior to 10.9.2.

Apple Mac OS X APPLE-SA-2014-02-25-1 Multiple Security Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Some of these issues may be trivial to exploit and will not require specific exploit code.

Apple Mac OS X APPLE-SA-2014-02-25-1 Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Apple Mac OS X APPLE-SA-2014-02-25-1 Multiple Security Vulnerabilities

References:

• Mac OS X Homepage (Apple)