CVE-2014-1372
First published: Tue Jul 01 2014(Updated: )
Graphics Driver in Apple OS X before 10.9.4 does not properly restrict read operations during processing of an unspecified system call, which allows local users to obtain sensitive information from kernel memory and bypass the ASLR protection mechanism via a crafted call.
Credit: product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple iOS and macOS | <=10.9.3 | |
| Apple iOS and macOS | =10.8.0 | |
| Apple iOS and macOS | =10.8.1 | |
| Apple iOS and macOS | =10.8.2 | |
| Apple iOS and macOS | =10.8.3 | |
| Apple iOS and macOS | =10.8.4 | |
| Apple iOS and macOS | =10.8.5 | |
| Apple iOS and macOS | =10.8.5-supplemental_update | |
| Apple iOS and macOS | =10.9 | |
| Apple iOS and macOS | =10.9.1 | |
| Apple iOS and macOS | =10.9.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-1372?
CVE-2014-1372 has been classified with a high severity due to its potential for local users to access sensitive kernel memory.
How do I fix CVE-2014-1372?
To resolve CVE-2014-1372, update your Mac OS X to version 10.9.4 or later.
Who is affected by CVE-2014-1372?
CVE-2014-1372 affects local users on Apple OS X versions prior to 10.9.4, including versions 10.8 and 10.9.
What type of vulnerability is CVE-2014-1372?
CVE-2014-1372 is a local information disclosure vulnerability that compromises kernel memory protection.
Can CVE-2014-1372 be exploited remotely?
CVE-2014-1372 cannot be exploited remotely as it requires local user access.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/author
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/apple
- canonical/apple ios and macos
- version/apple ios and macos/10.9.3
- version/apple ios and macos/10.8.0
- version/apple ios and macos/10.8.1
- version/apple ios and macos/10.8.2
- version/apple ios and macos/10.8.3
- version/apple ios and macos/10.8.4
- version/apple ios and macos/10.8.5
- version/apple ios and macos/10.8.5-supplemental_update
- version/apple ios and macos/10.9
- version/apple ios and macos/10.9.1
- version/apple ios and macos/10.9.2