CVE-2017-2489

🗓️ 02 Apr 2017 01:36:00Reported by appleType

cve🔗 web.nvd.nist.gov👁 87 Views🌐 WEB

Apple macOS before 10.12.4 Intel Graphics Driver allows information disclosur

Reporter	Title	Published	Views	Family All 16
zdt	macOS Kernel 10.12.2 (16C67) - Memory Disclosure Due to Lack of Bounds Checking in AppleIntelCapriCo	5 Apr 201700:00	–	zdt
Tenable Nessus	Mac OS X 10.x < 10.12.4 Multiple Vulnerabilities	31 Mar 201700:00	–	nessus
Tenable Nessus	macOS 10.12.x < 10.12.4 Multiple Vulnerabilities (httpoxy)	31 Mar 201700:00	–	nessus
Apple	About the security content of macOS Sierra 10.12.4, Security Update 2017-001 El Capitan, and Security Update 2017-001 Yosemite	27 Mar 201700:00	–	apple
Apple	About the security content of macOS Sierra 10.12.4, Security Update 2017-001 El Capitan, and Security Update 2017-001 Yosemite - Apple Support	29 Aug 201702:52	–	apple
BDU FSTEC	The vulnerability of the Mac OS X operating system, which allows a perpetrator to obtain confidential information	13 Apr 201700:00	–	bdu_fstec
Circl	CVE-2017-2489	4 Apr 201700:00	–	circl
CNVD	Apple macOS Sierra Intel Graphics Driver Information Disclosure Vulnerability	24 May 201700:00	–	cnvd
Cvelist	CVE-2017-2489	2 Apr 201701:36	–	cvelist
Exploit DB	Apple macOS Kernel 10.12.2 (16C67) - Memory Disclosure Due to Lack of Bounds Checking in AppleIntelCapriController::getDisplayPipeCapability	4 Apr 201700:00	–	exploitdb

NVD

Node

apple mac_os_xRange≤10.12.3

Parameter	Position	Path	Description	CWE
aid=265534	path	/p/project-zero/issues/attachment?aid=265534	Capri kernel memory disclosure via uncontrolled input indexing in AppleIntelCapriController::getDisplayPipeCapability; PoC reads kernel pointers and can lead to arbitrary read.	CWE-200

17 Jun 2026 01:16Current

5.2Medium risk

Vulners AI Score5.2

CVSS 24.3

CVSS 35.5

EPSS0.02308