Description
Mail in Apple OS X before 10.10 does not properly recognize the removal of a recipient address from a message, which makes it easier for remote attackers to obtain sensitive information in opportunistic circumstances by reading a message intended exclusively for other recipients.
References
- macosx-cve20144439-info-disc(97629) vdb-entry
- 70619 vdb-entry
- APPLE-SA-2014-10-16-1 vendor-advisory
- 1031063 vdb-entry
- https://support.apple.com/kb/HT6535