[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250363

 
 

909

 
 

196124

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2014-1372Date: (C)2014-07-02   (M)2023-12-22


Graphics Driver in Apple OS X before 10.9.4 does not properly restrict read operations during processing of an unspecified system call, which allows local users to obtain sensitive information from kernel memory and bypass the ASLR protection mechanism via a crafted call.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.9
Exploit Score: 3.9
Impact Score: 6.9
 
CVSS V2 Metrics:
Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality: COMPLETE
Integrity: NONE
Availability: NONE
  
Reference:
SECTRACK-1030505
SECUNIA-59475
APPLE-SA-2014-06-30-2
http://support.apple.com/kb/HT6296
https://code.google.com/p/google-security-research/issues/detail?id=18

CPE    11
cpe:/o:apple:mac_os_x:10.8.5
cpe:/o:apple:mac_os_x
cpe:/o:apple:mac_os_x:10.8.4
cpe:/o:apple:mac_os_x:10.9
...
CWE    1
CWE-264
OVAL    2
oval:org.secpod.oval:def:20170
oval:org.secpod.oval:def:20176

© SecPod Technologies