Apple Mac OS X APPLE-SA-2014-06-30-2 Multiple Security Vulnerabilities

Bugtraq ID:	68274
Class:	Unknown
CVE:	CVE-2014-1355 CVE-2014-1356 CVE-2014-1361 CVE-2014-1357 CVE-2014-1358 CVE-2014-1359
Remote:	Yes
Local:	Yes
Published:	Jun 30 2014 12:00AM
Updated:	Jun 30 2014 12:00AM
Credit:	cunzhang from Adlab of Venustech, Ian Beer of Google Project Zero and Thijs Alkemade of The Adium Project
Vulnerable:	Apple TV 2.2 Apple TV 2.1 Apple TV 2.0 Apple iPhone 4.0.1 Apple iPhone 4.3.3 Apple iPhone 4.3.2 Apple iPhone 4.3.1 Apple iPhone 4.3.0 Apple iPhone 4.2.8 Apple iPhone 4.2.5 Apple iPhone 4.2.1 Apple iPhone 4.1 Apple iPhone 4.0.2 Apple iPhone 4.0 - Iphone Apple iPhone 4.0 Apple iPad 3.2.1 Apple iPad 3.2.2 Apple iPad 3.2 Apple Apple TV 5.0 Apple Apple TV 4.4 Apple Apple TV 4.3 Apple Apple TV 4.2 Apple Apple TV 4.1 Apple Apple TV 4.0 Apple Apple TV 2.1
Not Vulnerable:

Apple Mac OS X APPLE-SA-2014-06-30-2 Multiple Security Vulnerabilities

Apple Mac OS X is prone to multiple security vulnerabilities that have been addressed in Security Update 2014-003.

The update addresses new vulnerabilities that affect Kernel, IOReporting, launchd, Security - Secure Transport components.

Attackers can exploit these issues to disclose sensitive information, execute arbitrary code in the context of the system privileges or cause denial-of-service conditions.

Apple Mac OS X 10.9 to 10.9.3 are vulnerable.

Apple Mac OS X APPLE-SA-2014-06-30-2 Multiple Security Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Some of these issues may be trivial to exploit and will not require specific exploit code.

Apple Mac OS X APPLE-SA-2014-06-30-2 Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Apple Mac OS X APPLE-SA-2014-06-30-2 Multiple Security Vulnerabilities

References:

• Mac OS X Homepage (Apple)