The xpc_data_get_bytes function in libxpc in Apple OS X before 10.10.2 does not verify that a dictionarys Attributes key has the xpc_data data type, which allows attackers to execute arbitrary code by providing a crafted dictionary to sysmond, related to an XPC type confusion issue.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mac_os_x | Apple | 10.10.0 (including) | 10.10.0 (including) |
| Mac_os_x | Apple | 10.10.1 (including) | 10.10.1 (including) |