Home / mailingsPDF  

APPLE-SA-2013-12-19-1 Motion 5.1

Posted on 19 December 2013
Apple Security-announce

--===============0823378575==
Content-type: multipart/signed;
boundary="Apple-Mail=_A3B1EAD7-95FB-4F62-80AD-C0C90698AE98";
protocol="application/pgp-signature"; micalg=pgp-sha1


--Apple-Mail=_A3B1EAD7-95FB-4F62-80AD-C0C90698AE98
Content-Transfer-Encoding: 7bit
Content-Type: text/plain;
charset=us-ascii

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

APPLE-SA-2013-12-19-1 Motion 5.1

Motion 5.1 is now available and addresses the following:

Motion
Available for: OS X Mavericks v10.9 or later
Impact: A maliciously crafted .motn file could lead to arbitrary
code execution
Description: An integer overflow existed in the handling of .motn
files which led to an out of bounds memory access. This issue was
addressed through improved bounds checking.
CVE-ID
CVE-2013-6114 : Jean Pascal Pereira

Motion 5.1 may be obtained from the Mac App Store.

Information will also be posted to the Apple Security Updates
web site: http://support.apple.com/kb/HT1222

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/

 

TOP