NVD

Id
36385  
Name
CVE-2014-9862  
Description
Integer signedness error in bspatch.c in bspatch in bsdiff, as used in Apple OS X before 10.11.6 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted patch file.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-07-21  
Modified Date
2016-11-28  
Seq
2014-9862  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
186083 36385 CVE-2014-9862 APPLE-SA-2016-07-18-1  View
186084 36385 CVE-2014-9862 openSUSE-SU-2016:1977  View
186085 36385 CVE-2014-9862 91824  View
186086 36385 CVE-2014-9862 https://android.googlesource.com/platform/external/bsdiff/+/4d054795b673855e3a7556c6f2f7ab99ca509998  View
186087 36385 CVE-2014-9862 https://bugs.chromium.org/p/chromium/issues/detail?id=372525  View
186088 36385 CVE-2014-9862 https://chromium.googlesource.com/chromiumos/third_party/bsdiff/+/d0307d1711bd74e51b783a49f9160775aa22e659  View
186089 36385 CVE-2014-9862 FreeBSD-SA-16:25  View
186090 36385 CVE-2014-9862 https://support.apple.com/HT206903  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
3248 JVNDB-2016-004021 Apple OS X などの製品で使用される bsdiff の bspatch の bspatch.c における整数符号エラーの脆弱性 Apple OS X およびその他の製品で使用される bsdiff の bspatch の bspatch.c には、整数符号エラーの脆弱性が存在します。 CVE-2014-9862 77155 CVE-2014-9862 36385 7.2 7.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004021.html 2016-07-18 2016-07-28 View