CVE-2014-4427 : App Sandbox in Apple OS X before 10.10 allows attackers to bypass a sandbox protection mechanism via the accessibility A

App Sandbox in Apple OS X before 10.10 allows attackers to bypass a sandbox protection mechanism via the accessibility API.

Published 2014-10-18 01:55:13

Updated 2017-08-29 01:35:02

Source Apple Inc.

View at NVD, CVE.org

Products affected by CVE-2014-4427

Apple » Mac Os X
Versions up to, including, (<=) 10.9.5
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.50%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 73 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

http://www.securitytracker.com/id/1031063

Apple OS X Multiple Flaws Let Users Execute Arbitrary Code, Obtain Elevated Privileges, Bypass Security Restrictions, and Obtain Potentially Sensitive Information - SecurityTracker

CVEs referencing this url
https://exchange.xforce.ibmcloud.com/vulnerabilities/97642

Apple Mac OS X accessibility API security bypass CVE-2014-4427 Vulnerability Report
http://www.securityfocus.com/bid/70635

Apple Mac OS X CVE-2014-4427 Accessibility API Security Bypass Vulnerability
https://support.apple.com/kb/HT6535

About the security content of OS X Yosemite v10.10 - Apple Support
Vendor Advisory

CVEs referencing this url
http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html

CVEs referencing this url

Jump to