First published: Tue Jul 01 2014(Updated: )
Intel Compute in Apple OS X before 10.9.4 does not properly restrict an unspecified OpenCL API call, which allows attackers to execute arbitrary code via a crafted application.
Credit: product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iOS and macOS | <=10.9.3 | |
Apple iOS and macOS | =10.8.0 | |
Apple iOS and macOS | =10.8.1 | |
Apple iOS and macOS | =10.8.2 | |
Apple iOS and macOS | =10.8.3 | |
Apple iOS and macOS | =10.8.4 | |
Apple iOS and macOS | =10.8.5 | |
Apple iOS and macOS | =10.8.5-supplemental_update | |
Apple iOS and macOS | =10.9 | |
Apple iOS and macOS | =10.9.1 | |
Apple iOS and macOS | =10.9.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-1376 has a high severity as it allows attackers to execute arbitrary code in affected versions of macOS.
To fix CVE-2014-1376, users should update their macOS to version 10.9.4 or later.
CVE-2014-1376 affects macOS versions prior to 10.9.4, including versions 10.8.0 through 10.9.3.
Attackers can execute arbitrary code on the system through a crafted application exploiting this vulnerability.
While specific exploits for CVE-2014-1376 are not publicly detailed, the vulnerability's nature poses significant risks to affected systems.