CVE-2014-1372

2014-07-0110:17:27

CWE-264

[email protected]

web.nvd.nist.gov

cve-2014-1372

graphics driver

apple os x

security vulnerability

aslr bypass

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:N/A:N

5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Graphics Driver in Apple OS X before 10.9.4 does not properly restrict read operations during processing of an unspecified system call, which allows local users to obtain sensitive information from kernel memory and bypass the ASLR protection mechanism via a crafted call.

Affected configurations

NVD

Node

applemac_os_xRange≤10.9.3

applemac_os_xMatch10.8.0

applemac_os_xMatch10.8.1

applemac_os_xMatch10.8.2

applemac_os_xMatch10.8.3

applemac_os_xMatch10.8.4

applemac_os_xMatch10.8.5

applemac_os_xMatch10.8.5supplemental_update

applemac_os_xMatch10.9

applemac_os_xMatch10.9.1

applemac_os_xMatch10.9.2

CPENameOperatorVersion
apple:mac_os_xapple mac os xle10.9.3
apple:mac_os_xapple mac os xeq10.8.0
apple:mac_os_xapple mac os xeq10.8.1
apple:mac_os_xapple mac os xeq10.8.2
apple:mac_os_xapple mac os xeq10.8.3
apple:mac_os_xapple mac os xeq10.8.4
apple:mac_os_xapple mac os xeq10.8.5
apple:mac_os_xapple mac os xeq10.9
apple:mac_os_xapple mac os xeq10.9.1
apple:mac_os_xapple mac os xeq10.9.2

CPE	Name	Operator	Version
apple:mac_os_x	apple mac os x	le	10.9.3
apple:mac_os_x	apple mac os x	eq	10.8.0
apple:mac_os_x	apple mac os x	eq	10.8.1
apple:mac_os_x	apple mac os x	eq	10.8.2
apple:mac_os_x	apple mac os x	eq	10.8.3
apple:mac_os_x	apple mac os x	eq	10.8.4
apple:mac_os_x	apple mac os x	eq	10.8.5
apple:mac_os_x	apple mac os x	eq	10.9
apple:mac_os_x	apple mac os x	eq	10.9.1
apple:mac_os_x	apple mac os x	eq	10.9.2