Vulnerability Details : CVE-2014-1372
Potential exploit
Graphics Driver in Apple OS X before 10.9.4 does not properly restrict read operations during processing of an unspecified system call, which allows local users to obtain sensitive information from kernel memory and bypass the ASLR protection mechanism via a crafted call.
Products affected by CVE-2014-1372
- cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.8.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.8.0:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.8.2:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.8.3:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.8.4:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.8.5:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.9.1:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.9:*:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.8.5:supplemental_update:*:*:*:*:*:*
- cpe:2.3:o:apple:mac_os_x:10.9.2:*:*:*:*:*:*:*
Threat overview for CVE-2014-1372
Top countries where our scanners detected CVE-2014-1372
Top open port discovered on systems with this issue
548
IPs affected by CVE-2014-1372 114
Threat actors abusing to this issue?
Yes
Find out if you* are
affected by CVE-2014-1372!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2014-1372
0.07%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 19 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2014-1372
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
4.9
|
MEDIUM | AV:L/AC:L/Au:N/C:C/I:N/A:N |
3.9
|
6.9
|
NIST |
CWE ids for CVE-2014-1372
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2014-1372
-
http://archives.neohapsis.com/archives/bugtraq/2014-06/0172.html
-
http://support.apple.com/kb/HT6296
About the security content of OS X Mavericks v10.9.4 and Security Update 2014-003 - Apple Support
-
http://www.securitytracker.com/id/1030505
Apple OS X Bugs Let Remote Users Execute Arbitrary Code and Local Users Gain Elevated Privileges - SecurityTracker
-
https://code.google.com/p/google-security-research/issues/detail?id=18
Exploit
Jump to