CVE-2014-4350

CVE-2014-4350: Buffer overflow in QT Media Foundation on Apple OS X before 10.9.5 allows remote code execution or denial of service via a crafted MIDI file. Root cause: memory corruption from MIDI handling in QT Media Foundation. Affected: OS X versions prior to 10.9.5. Impact: arbitrary code exe...

CVE-2014-4350

Buffer overflow in QT Media Foundation in Apple OS X before 10.9.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted MIDI file...

CVE-2014-4402

CVE-2014-4402 is an Apple OS X vulnerability affecting OS X versions prior to 10.9.5. It concerns an unspecified IOAcceleratorFamily function that lacks proper bounds checking on read operations, allowing an attacker to execute arbitrary code in a privileged context via a crafted application. The...

CVE-2014-4400

An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application, a different vulnerability than CVE-2014-4394,...

CVE-2014-4401

The CVE concerns Apple OS X prior to 10.9.5 and the Intel Graphics Driver subsystem. It describes an unspecified integrated graphics driver routine that does not properly validate calls, allowing arbitrary code execution in a privileged context via a crafted application. The impact is a local cod...

CVE-2014-4396

CVE-2014-4396 concerns an insufficient validation in an unspecified integrated graphics driver routine of the Intel Graphics Driver subsystem on Apple OS X prior to 10.9.5. The flaw allows a crafted application to trigger execution of arbitrary code in a privileged context. The vulnerability is d...

CVE-2014-4376

CVE-2014-4376 affects Apple OS X, specifically IOKit in IOAcceleratorFamily prior to OS X 10.9.5. The issue is a kernel NULL pointer dereference that can allow an attacker to execute arbitrary code in a privileged context or cause a denial of service by passing crafted API arguments to IOKit/IOAc...

CVE-2014-4399

Technical details about CVE-2014-4399 are not publicly provided in the supplied connected documents. The initial description offers a general impact but no concrete vulnerability details. Monitor for updates from official advisories.

CVE-2014-4401

An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application, a different vulnerability than CVE-2014-4394,...

CVE-2014-4393

Buffer overflow in the shader compiler in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted GLSL shader...

CVE-2014-4395

An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application, a different vulnerability than CVE-2014-4394,...

CVE-2014-4398

An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application, a different vulnerability than CVE-2014-4394,...

CVE-2014-4402

An unspecified IOAcceleratorFamily function in Apple OS X before 10.9.5 lacks proper bounds checking on read operations, which allows attackers to execute arbitrary code in a privileged context via a crafted application...

CVE-2014-4394

An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application, a different vulnerability than CVE-2014-4395,...

CVE-2014-4394

CVE-2014-4394 affects Apple OS X up to 10.9.5 due to an unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem that does not properly validate calls. This can enable arbitrary code execution in a privileged context via a crafted application. Root cause: improper val...

CVE-2014-4403

The kernel in Apple OS X before 10.9.5 allows local users to obtain sensitive address information and bypass the ASLR protection mechanism by leveraging predictability of the location of the CPU Global Descriptor Table...

CVE-2014-4390

CVE-2014-4390 concerns a Bluetooth API validation flaw in Apple OS X prior to 10.9.5. The issue arises from improper validation of API calls in the Bluetooth stack, enabling a crafted application to execute arbitrary code in a privileged context. Psychological impact is elevated as affected syste...

CVE-2014-4416

An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application, a different vulnerability than CVE-2014-4394,...

CVE-2014-1391

CVE-2014-1391 affects QT Media Foundation on Apple OS X prior to 10.9.5. The vulnerability is a memory corruption in handling RLE-encoded movie files, which can allow remote code execution or cause a denial of service through a crafted file. Connected sources (OpenVAS kiss) corroborate that this ...

CVE-2014-4393

CVE-2014-4393 describes a buffer overflow in the Intel Graphics Driver shader compiler on Apple OS X, allowing remote code execution or a denial of service via a crafted GLSL shader. Affected: OS X prior to 10.9.5; root cause: buffer overflow in shader compiler; impact: arbitrary code execution o...