First published: Thu Oct 24 2013(Updated: )
The kernel in Apple Mac OS X before 10.9 allows local users to obtain sensitive information or cause a denial of service (out-of-bounds read and system crash) via a crafted Mach-O file.
Credit: product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iOS and macOS | <=10.8.5 | |
Apple iOS and macOS | =10.8.0 | |
Apple iOS and macOS | =10.8.1 | |
Apple iOS and macOS | =10.8.2 | |
Apple iOS and macOS | =10.8.3 | |
Apple iOS and macOS | =10.8.4 | |
Apple iOS and macOS | =10.8.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-5175 is classified with a medium severity, allowing local users to potentially access sensitive information or cause system crashes.
To mitigate CVE-2013-5175, users should upgrade their Mac OS X to version 10.9 or later.
CVE-2013-5175 affects local users of Apple Mac OS X versions prior to 10.9.
Exploitation of CVE-2013-5175 can lead to information disclosure or a denial of service through system crashes.
Yes, Apple provided a security update to address CVE-2013-5175 in Mac OS X 10.9.