CVE-2014-9862

Integer signedness error in bspatch.c in bspatch in bsdiff, as used in Apple OS X before 10.11.6 and other products, allows remote attackers to execute…

published July 22, 2016

CVSS
—
EPSS
7%
Percentile
94.0
In the wild
Unconfirmed
What it is

Integer signedness error in bspatch.c in bspatch in bsdiff, as used in Apple OS X before 10.11.6 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted patch file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06762 · 94.0th percentile
Published
2016-07-22T01:00Z
EPSS history
Timeline
  • 22 JUL 01:00Z
    Integer signedness error in bspatch.c in bspatch in bsdiff, as used in Apple OS X before 10.11.6 and other products, allows remote attackers to execute…
    cvelistv5