CVE-2014-1252

Double free vulnerability in Apple Pages 2.x before 2.1 and 5.x before 5.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Microsoft Word file.

• CWE-415

• http://osvdb.org/102460Broken Link
• http://secunia.com/advisories/56615Permissions Required
• http://secunia.com/advisories/56630Permissions Required
• http://support.apple.com/kb/HT6117Vendor Advisory
• http://support.apple.com/kb/HT6150Vendor Advisory
• http://support.apple.com/kb/HT6162Vendor Advisory
• http://www.securityfocus.com/bid/65113Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1029683Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90672
• http://osvdb.org/102460Broken Link
• http://secunia.com/advisories/56615Permissions Required
• http://secunia.com/advisories/56630Permissions Required
• http://support.apple.com/kb/HT6117Vendor Advisory
• http://support.apple.com/kb/HT6150Vendor Advisory
• http://support.apple.com/kb/HT6162Vendor Advisory
• http://www.securityfocus.com/bid/65113Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1029683Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90672

Published

Jan 24, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-125123An unauthenticated SQL injection vulnerability exists in the…10
• CVE-2014-125124An unauthenticated remote command execution vulnerability ex…10
• CVE-2014-125125A path traversal vulnerability exists in A10 Networks AX Loa…8.8
• CVE-2014-125126An unrestricted file upload vulnerability exists in Simple E…9.2
• CVE-2014-125127The mikecao/flight PHP framework in versions prior to v1.2 i…7.5
• CVE-2014-125128'sanitize-html' prior to version 1.0.3 is vulnerable to Cros…6.1
• CVE-2014-1253AppleMNT.sys in Apple Boot Camp 5 before 5.1 allows local us…
• CVE-2014-1254Apple Type Services (ATS) in Apple OS X before 10.9.2 allows…
• CVE-2014-1255Apple Type Services (ATS) in Apple OS X before 10.9.2 does n…
• CVE-2014-1256Buffer overflow in Apple Type Services (ATS) in Apple OS X b…
• CVE-2014-1257CFNetwork in Apple OS X through 10.8.5 does not remove sessi…
• CVE-2014-1258Heap-based buffer overflow in CoreAnimation in Apple OS X be…