CVE-2014-1372 — Apple MAC OS X vulnerability

CWE-2643 documents3 sources
Severity
4.9MEDIUMNVD
EPSS
0.1%
top 78.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apple MAC OS X
Timeline
PublishedJul 1
Latest updateMay 17

Description

Graphics Driver in Apple OS X before 10.9.4 does not properly restrict read operations during processing of an unspecified system call, which allows local users to obtain sensitive information from kernel memory and bypass the ASLR protection mechanism via a crafted call.

CVSS vector

AV:L/AC:L/C:C/I:N/A:NExploitability: 3.9 | Impact: 6.9

Affected Packages1 packages

▶NVDapple/mac_os_x10.9.3+9

🔴Vulnerability Details

2
GHSA
GHSA-cmq7-qqv3-qrgw: Graphics Driver in Apple OS X before 10↗2022-05-17
▶
Project0
pwn4fun Spring 2014 - Safari - Part II - Project Zero↗2014-11-01
▶