Vulnerability in Apple Mac OS X
CVE-2014-1372
Graphics Driver in Apple OS X before 10.9.4 does not properly restrict read operations during processing of an unspecified system call, which allows local users to obtain sensitive information from kernel memory and bypass the ASLR protection mechanism via a crafted call.
EPSS: 0.005 (38.2th percentile) — read the EPSS interpretation.
Affected products
- Apple Mac_os_x — versions 10.8.0, 10.8.1, 10.8.2
- N/a — versions n/a
Weakness classification (CWE)
References
- product-security@apple.com (x_refsource_CONFIRM)
- product-security@apple.com (vdb-entry, x_refsource_SECTRACK)
- product-security@apple.com (vendor-advisory, x_refsource_APPLE)
- product-security@apple.com (Exploit, x_refsource_MISC)
- product-security@apple.com (x_refsource_SECUNIA, third-party-advisory)