Description
Double free vulnerability in Apple Pages 2.x before 2.1 and 5.x before 5.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Microsoft Word file.
References
- apple-pages-cve20141252-code-exec(90672) vdb-entry
- 1029683 vdb-entry
- http://support.apple.com/kb/HT6150
- 56630 third-party-advisory
- 56615 third-party-advisory
- 65113 vdb-entry
- http://support.apple.com/kb/HT6162
- 102460 vdb-entry
- http://support.apple.com/kb/HT6117