Detections
Analytics

Apple Pages < 2.1 / 5.1 Microsoft Word Document Handling Double Free Arbitrary Code Execution

high Nessus Plugin ID 72281

Language:

Synopsis

An application on the remote host could allow arbitrary code execution.

Description

According to its self-reported version number, the Apple Pages install on the remote Mac OS X host reportedly has a double-free issue in its handling of Microsoft Word documents that could lead to unexpected program termination or arbitrary code execution.

Solution

Upgrade to Apple Pages 2.1 / 5.1 or later.

See Also

http://support.apple.com/kb/HT6117

Plugin Details

Severity: High

ID: 72281

File Name: macosx_pages_5_1.nasl

Version: 1.3

Type: local

Agent: macosx

Published: 2/4/2014

Updated: 11/26/2019

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.8

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS Score Source: CVE-2014-1252

Vulnerability Information

CPE: cpe:/a:apple:pages

Required KB Items: Host/local_checks_enabled, Host/MacOSX/Version, MacOSX/Pages/Installed

Exploit Ease: No known exploits are available

Patch Publication Date: 1/23/2014

Vulnerability Publication Date: 1/23/2014

Reference Information

CVE: CVE-2014-1252

BID: 65113

APPLE-SA: APPLE-SA-2014-01-23-1