WindowServer in Apple OS X through 10.9.2 does not prevent session creation by a sandboxed application, which allows attackers to bypass the sandbox protection mechanism and execute arbitrary code via a crafted application.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mac_os_x | Apple | * | 10.9.2 (including) |
| Mac_os_x | Apple | 10.9 (including) | 10.9 (including) |
| Mac_os_x | Apple | 10.9.1 (including) | 10.9.1 (including) |