CVE-2014-1252

Apple Pages < 10.9.1 - Double Free

Title source: rule

Description

Double free vulnerability in Apple Pages 2.x before 2.1 and 5.x before 5.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Microsoft Word file.

References (9)

[Broken Link] http://osvdb.org/102460

[Permissions Required] http://secunia.com/advisories/56615

[Permissions Required] http://secunia.com/advisories/56630

[Vendor Advisory] http://support.apple.com/kb/HT6117

[Vendor Advisory] http://support.apple.com/kb/HT6150

[Vendor Advisory] http://support.apple.com/kb/HT6162

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/65113

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1029683

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/90672

Scores

EPSS 0.0412

EPSS Percentile 88.4%

Classification

CWE

CWE-415

Status draft

Affected Products (7)

apple/pages

apple/mac_os_x < 10.9.1

apple/iphone_os < 7.0

Timeline

Published Jan 24, 2014

Tracked Since Feb 18, 2026