Unscored CVE-2014-4437 EUVD-2014-4364GHSA-qcfh-fg5j-53gj

LaunchServices in Apple OS X before 10.10 allows attackers to bypass intended sandbox restrictions via an application that specifies a craf…

Published Oct 18, 2014 · Updated Aug 6, 2024 · Assigned by apple

Description

LaunchServices in Apple OS X before 10.10 allows attackers to bypass intended sandbox restrictions via an application that specifies a crafted handler for the Content-Type field of an object.

References

APPLE-SA-2014-10-16-1 vendor-advisory
1031063 vdb-entry
https://support.apple.com/kb/HT6535
macosx-cve20144437-sec-bypass(97631) vdb-entry
70627 vdb-entry