Integer overflow in Apple Motion

CVE-2013-6114

Integer overflow in the OZDocument::parseElement function in Apple Motion 5.0.7 allows remote attackers to cause a denial of service (application crash) via a (1) large or (2) small value in the subview attribute of a viewer element in a .motn file.

Vulnerability class: Integer Overflow

EPSS: 0.049 (91.2th percentile) — read the EPSS interpretation.

Affected products

Apple Motion — versions 5.0.7
N/a — versions n/a

Weakness classification (CWE)

CWE-190 — Integer Overflow or Wraparound

References

cve@mitre.org (Exploit, Third Party Advisory, exploit, x_refsource_EXPLOIT-DB)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)