CVEvulnerability
CVE-2014-1372
4.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-07-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.9 MEDIUM — AV:L/AC:L/Au:N/C:C/I:N/A:N
- Weaknesses
- CWE-264
Description
Graphics Driver in Apple OS X before 10.9.4 does not properly restrict read operations during processing of an unspecified system call, which allows local users to obtain sensitive information from kernel memory and bypass the ASLR protection mechanism via a crafted call.
Affected configurations
• apple mac os x (<= 10.9.3)
• apple mac os x 10.8.0
• apple mac os x 10.8.1
• apple mac os x 10.8.2
• apple mac os x 10.8.3
• apple mac os x 10.8.4
• apple mac os x 10.8.5
• apple mac os x 10.9
• apple mac os x 10.9.1
• apple mac os x 10.9.2
Related
Weakness · not in database (1)
References
- http://archives.neohapsis.com/archives/bugtraq/2014-06/0172.html archives.neohapsis.com
- http://secunia.com/advisories/59475 secunia.com
- http://support.apple.com/kb/HT6296 support.apple.com
- http://www.securitytracker.com/id/1030505 www.securitytracker.com
- https://code.google.com/p/google-security-research/issues/detail?id=18 Exploit
- http://archives.neohapsis.com/archives/bugtraq/2014-06/0172.html archives.neohapsis.com
- http://secunia.com/advisories/59475 secunia.com
- http://support.apple.com/kb/HT6296 support.apple.com
- http://www.securitytracker.com/id/1030505 www.securitytracker.com
- https://code.google.com/p/google-security-research/issues/detail?id=18 Exploit