VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 23, 2014· Updated Jun 17, 2026

CVE-2014-1315

CVE-2014-1315

Description

Format string vulnerability in CoreServicesUIAgent in Apple OS X 10.9.x through 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in a URL.

Affected products

4
  • Apple Inc./Mac OS X3 versions
    cpe:2.3:o:apple:mac_os_x:10.9:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:apple:mac_os_x:10.9:*:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.9.1:*:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.9.2:*:*:*:*:*:*:*
  • Apple Inc./OS Xllm-fuzzy
    Range: 10.9.x through 10.9.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.