Design/Logic Flaw

Intel Graphics Driver in Apple OS X before 10.9.4 allows local users to bypass the ASLR protection mechanism by leveraging read access to a kernel pointer in an IOKit object...

CVE-2014-1375

CVE-2014-1375 affects the Intel Graphics Driver on Apple OS X

CVE-2014-1372

Graphics Driver in Apple OS X before 10.9.4 does not properly restrict read operations during processing of an unspecified system call, which allows local users to obtain sensitive information from kernel memory and bypass the ASLR protection mechanism via a crafted call...

CVE-2014-1373

CVE-2014-1373 affects the Intel Graphics Driver in Apple OS X prior to 10.9.4. The issue is an out‑of‑bounds/insufficient restriction of an OpenGL API call, allowing a crafted application to execute arbitrary code with system privileges. Public writeups from Project Zero detail an OS X GPU driver...

CVE-2014-1373

Intel Graphics Driver in Apple OS X before 10.9.4 does not properly restrict an unspecified OpenGL API call, which allows attackers to execute arbitrary code via a crafted application...

CVE-2014-1372

CVE-2014-1372 affects the Apple Graphics Driver in OS X prior to 10.9.4, where an out-of-bounds/read restriction flaw during a system-call processing path can allow a local user to read kernel memory and bypass ASLR. The connected Project Zero material describes exploitation via IOKit/virtual fun...

CVE-2014-1375: Undefined Security Weakness

Intel Graphics Driver in Apple OS X before 10.9.4 allows local users to bypass the ASLR protection mechanism by leveraging read access to a kernel pointer in an IOKit object...

PT-2014-4154

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.9.4 Description The issue allows local users to bypass the Address Space Layout Randomization ASLR protection mechanism. This is achieved by leveraging read access to a kernel pointer in an IOKit object, which i...

PT-2014-4153

Name of the Vulnerable Software and Affected Versions Intel Graphics Driver in Apple OS X versions prior to 10.9.4 Description The issue is related to an unspecified OpenGL API call that is not properly restricted, allowing attackers to execute arbitrary code via a crafted application...

Mac OS X Multiple Vulnerabilities (Security Update 2014-003)

The remote host is running a version of Mac OS X 10.7 or 10.8 that does not have Security Update 2014-003 applied. This update contains several security-related fixes for the following components : - copyfile - Dock - Graphics Driver - Intel Graphics Driver - Intel Compute - IOAcceleratorFamily -...

Mac OS X 10.9.x < 10.9.4 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.9.x that is prior to 10.9.4. This update contains several security-related fixes for the following components : - Certificate Trust Policy - copyfile - curl - Dock - Graphics Driver - iBooks Commerce - Intel Graphics Driver - Intel Compute -...

CVE-2014-1373: Undefined Security Weakness

Intel Graphics Driver in Apple OS X before 10.9.4 does not properly restrict an unspecified OpenGL API call, which allows attackers to execute arbitrary code via a crafted application...

CVE-2014-1372: Undefined Security Weakness

Graphics Driver in Apple OS X before 10.9.4 does not properly restrict read operations during processing of an unspecified system call, which allows local users to obtain sensitive information from kernel memory and bypass the ASLR protection mechanism via a crafted call...

APPLE-SA-2014-04-22-1 Security Update 2014-002

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-04-22-1 Security Update 2014-002 Security Update 2014-002 is now available and addresses the following: CFNetwork HTTPProtocol Available for: OS X Lion v10.7.5, OS X Lion Server v10.7.5, OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.2...

(Pwn2Own\Pwn4Fun) Apple OS X Graphics Driver Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Intel graphics...

CVE-2014-1318

The Intel Graphics Driver in Apple OS X through 10.9.2 does not properly validate a certain pointer, which allows attackers to execute arbitrary code via a crafted application...

Code injection

The Intel Graphics Driver in Apple OS X through 10.9.2 does not properly validate a certain pointer, which allows attackers to execute arbitrary code via a crafted application...

CVE-2014-1318

The Intel Graphics Driver in Apple OS X through 10.9.2 does not properly validate a certain pointer, which allows attackers to execute arbitrary code via a crafted application...

CVE-2014-1318

CVE-2014-1318 affects the Intel Graphics Driver in Apple OS X up to 10.9.2. The root cause is a validation flaw for a pointer from userspace, allowing a crafted application to execute arbitrary code (as described in multiple sources). The vulnerability is mapped to an in-the-wild risk as high/rem...

PT-2014-4100

Name of the Vulnerable Software and Affected Versions Apple OS X versions through 10.9.2 Description The issue is related to the Intel Graphics Driver, which does not properly validate a certain pointer. This allows attackers to execute arbitrary code via a crafted application. The vulnerability...