PT-2014-4038 · Microsoft+1 · Office Word+1

Publicado 2014-01-24 · Atualizado 2017-08-29 · CVE-2014-1252

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple Pages versions 2.x before 2.1 Apple Pages versions 5.x before 5.1

Description A double free issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted Microsoft Word file.

Recommendations For Apple Pages versions 2.x before 2.1, update to version 2.1 or later. For Apple Pages versions 5.x before 5.1, update to version 5.1 or later.

Correção

Double Free

Enumeração de Fraquezas

CWE-415

Identificadores relacionados

CVE-2014-1252

Produtos afetados

Pages

Office Word

Referências · 10

• http://securitytracker.com/id/1029683 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90672 · Nota
• http://support.apple.com/kb/HT6162 · Aviso do Fabricante
• http://osvdb.org/102460 · Nota
• http://support.apple.com/kb/HT6117 · Aviso do Fabricante
• http://secunia.com/advisories/56615 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-1252 · Nota de Segurança
• http://support.apple.com/kb/HT6150 · Aviso do Fabricante
• http://secunia.com/advisories/56630 · Nota
• http://securityfocus.com/bid/65113 · Nota