Vulnerabilities > Critical

DATE CVE VULNERABILITY TITLE RISK
2014-07-01 CVE-2013-3664 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products
Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689) allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers an out-of-bounds stack write.
network
google trimble CWE-119
critical
9.3
2014-07-01 CVE-2013-3662 Buffer Errors vulnerability in Google Sketchup 7.0/7.1/8.0
Timbre SketchUp (formerly Google SketchUp) before 8 Maintenance 2 allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers a stack-based buffer overflow.
network
google CWE-119
critical
9.3
2014-07-01 CVE-2014-1381 Permissions, Privileges, and Access Controls vulnerability in Apple mac OS X
Thunderbolt in Apple OS X before 10.9.4 does not properly restrict IOThunderBoltController API calls, which allows attackers to execute arbitrary code or cause a denial of service (out-of-bounds memory access and application crash) via a crafted call.
network
low complexity
apple CWE-264
critical
10.0
2014-07-01 CVE-2014-1379 Unspecified vulnerability in Apple mac OS X
Graphics Drivers in Apple OS X before 10.9.4 allows attackers to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via a 32-bit executable file for a crafted application.
network
low complexity
apple
critical
10.0
2014-07-01 CVE-2014-1377 Unspecified vulnerability in Apple mac OS X
Array index error in IOAcceleratorFamily in Apple OS X before 10.9.4 allows attackers to execute arbitrary code via a crafted application.
network
low complexity
apple
critical
10.0
2014-07-01 CVE-2014-1376 Permissions, Privileges, and Access Controls vulnerability in Apple mac OS X
Intel Compute in Apple OS X before 10.9.4 does not properly restrict an unspecified OpenCL API call, which allows attackers to execute arbitrary code via a crafted application.
network
low complexity
apple CWE-264
critical
10.0
2014-07-01 CVE-2014-1373 Permissions, Privileges, and Access Controls vulnerability in Apple mac OS X
Intel Graphics Driver in Apple OS X before 10.9.4 does not properly restrict an unspecified OpenGL API call, which allows attackers to execute arbitrary code via a crafted application.
network
low complexity
apple CWE-264
critical
10.0
2014-07-01 CVE-2014-1359 Numeric Errors vulnerability in Apple Iphone OS and Tvos
Integer underflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application.
network
low complexity
apple CWE-189
critical
10.0
2014-07-01 CVE-2014-1358 Numeric Errors vulnerability in Apple Iphone OS, mac OS X and Tvos
Integer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application.
network
low complexity
apple CWE-189
critical
10.0
2014-07-01 CVE-2014-1357 Buffer Errors vulnerability in Apple Iphone OS, mac OS X and Tvos
Heap-based buffer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application that generates log messages.
network
low complexity
apple CWE-119
critical
10.0