CVE-2014-4492

The record

libnetcore in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not verify that certain values have the expected data type, which allows attackers to execute arbitrary code in an _networkd context via a crafted XPC message from a sandboxed app, as demonstrated by lack of verification of the XPC dictionary data type.

Affected packages

Related vulnerabilities

• CVE-2019-12828 An issue was discovered in Electronic Arts Origin before 10.5.39. CWE-19
• CVE-2019-0946 A remote code execution vulnerability exists when the Microsoft Office Access… CWE-19
• CVE-2019-0947 A remote code execution vulnerability exists when the Microsoft Office Access… CWE-19
• CVE-2019-0945 A remote code execution vulnerability exists when the Microsoft Office Access… CWE-19
• CVE-2019-0801 A remote code execution vulnerability exists when Microsoft Office fails to properly… CWE-19
• CVE-2019-0630 A remote code execution vulnerability exists in the way that the Microsoft Server Message… CWE-19
• CVE-2019-0633 A remote code execution vulnerability exists in the way that the Microsoft Server Message… CWE-19
• CVE-2009-5155 In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c… CWE-19