Apple Mac OS X multiple security vulnerabilities (APPLE-SA-2014-02-25-1)

Release date:
Updated on:

Affected Systems:
Apple Mac OS X <10.9.2
Description:
--------------------------------------------------------------------------------
Bugtraq id: 65777
CVE (CAN) ID: CVE-2014-1254, CVE-2014-1262, CVE-2014-1255, CVE-2014-1256, CVE-2014-1257, CVE-2014-1258, CVE-2014-1261, CVE-2014-1263, CVE-2014-1265, CVE-2014-1259, CVE-2014-1264, CVE-2014-1260, CVE-2014-1246, CVE-2014-1247, CVE-2014-1248, CVE-2014-1245

OS x (formerly Mac OS X) is the latest version of Apple's exclusive operating system developed for Mac tower computers.

OS X 10.9.2 and earlier versions have multiple implementation vulnerabilities that affect ATS, CFNetwork Cookies, CoreAnimation, CoreText, Date and Time, curl, QuickTime, QuickLook, Finder, the File Bookmark component allows attackers to exploit these vulnerabilities to execute arbitrary code, obtain unauthorized access permissions, bypass security restrictions, and execute other attacks.

<* Source: Roland Moriz
Felix Groebert

Link: http://lists.apple.com/archives/security-announce/2014/Feb/msg00000.html
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Apple
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.apple.com/support/downloads/