Home / mailings APPLE-SA-2013-12-19-1 Motion 5.1
Posted on 19 December 2013
Apple Security-announce--===============0823378575==
Content-type: multipart/signed;
boundary="Apple-Mail=_A3B1EAD7-95FB-4F62-80AD-C0C90698AE98";
protocol="application/pgp-signature"; micalg=pgp-sha1
--Apple-Mail=_A3B1EAD7-95FB-4F62-80AD-C0C90698AE98
Content-Transfer-Encoding: 7bit
Content-Type: text/plain;
charset=us-ascii
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
APPLE-SA-2013-12-19-1 Motion 5.1
Motion 5.1 is now available and addresses the following:
Motion
Available for: OS X Mavericks v10.9 or later
Impact: A maliciously crafted .motn file could lead to arbitrary
code execution
Description: An integer overflow existed in the handling of .motn
files which led to an out of bounds memory access. This issue was
addressed through improved bounds checking.
CVE-ID
CVE-2013-6114 : Jean Pascal Pereira
Motion 5.1 may be obtained from the Mac App Store.
Information will also be posted to the Apple Security Updates
web site: http://support.apple.com/kb/HT1222
This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/