Apple Mac OS X CVE-2014-4433 HFS Resource Forks Local Heap Buffer Overflow Vulnerability

Bugtraq ID:	70620
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2014-4433
Remote:	No
Local:	Yes
Published:	Oct 16 2014 12:00AM
Updated:	Oct 21 2014 07:02PM
Credit:	Maksymilian Arciemowicz
Vulnerable:	Cosmicperl Directory Pro 10.0.3 Apple Mac OS X 10.6.4 Apple Mac OS X 10.6.3 Apple Mac OS X 10.6.2 Apple Mac OS X 10.6.1 Apple Mac OS X 10.5.8 Apple Mac OS X 10.5.7 Apple Mac OS X 10.5.6 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.5 Apple Mac OS X 10.4.11 Apple Mac OS X 10.4.10 Apple Mac OS X 10.4.9 Apple Mac OS X 10.4.8 Apple Mac OS X 10.4.7 Apple Mac OS X 10.4.6 Apple Mac OS X 10.4.5 Apple Mac OS X 10.4.4 Apple Mac OS X 10.4.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 Apple Mac OS X 10.3.9 Apple Mac OS X 10.3.8 Apple Mac OS X 10.3.7 Apple Mac OS X 10.3.6 Apple Mac OS X 10.3.5 Apple Mac OS X 10.3.4 Apple Mac OS X 10.3.3 Apple Mac OS X 10.3.2 Apple Mac OS X 10.3.1 Apple Mac OS X 10.3 Apple Mac OS X 10.2.8 Apple Mac OS X 10.2.7 Apple Mac OS X 10.2.6 Apple Mac OS X 10.2.5 Apple Mac OS X 10.2.4 Apple Mac OS X 10.2.3 Apple Mac OS X 10.2.2 Apple Mac OS X 10.2.1 Apple Mac OS X 10.2 Apple Mac OS X 10.1.5 Apple Mac OS X 10.1.4 Apple Mac OS X 10.1.3 Apple Mac OS X 10.1.2 Apple Mac OS X 10.1.1 Apple Mac OS X 10.1 Apple Mac OS X 10.0.4 Apple Mac OS X 10.0.2 Apple Mac OS X 10.0.1 Apple Mac OS X 10.0 3 Apple Mac OS X 10.0 Apple Mac Os X 10.7.4 Apple Mac Os X 10.7.3 Apple Mac Os X 10.7.2 Apple Mac Os X 10.7.1 Apple Mac OS X 10.6 Apple Mac OS X 10.5
Not Vulnerable:

Apple Mac OS X CVE-2014-4433 HFS Resource Forks Local Heap Buffer Overflow Vulnerability

Apple Mac OS X is prone to a local heap-based buffer-overflow vulnerability.

A local attacker can leverage this issue to execute arbitrary code with kernel level privileges or cause the affected system to shutdown, denying service to legitimate users.

Apple Mac OS X CVE-2014-4433 HFS Resource Forks Local Heap Buffer Overflow Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apple Mac OS X CVE-2014-4433 HFS Resource Forks Local Heap Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Apple Mac OS X CVE-2014-4433 HFS Resource Forks Local Heap Buffer Overflow Vulnerability

References:

• APPLE-SA-2014-10-16-1 OS X Yosemite v10.10 (Apple)
  
• Mac OS X Homepage (Apple)