CVE-2017-2489: Infoleak
Published Apr 2, 2017
·Updated
An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to obtain sensitive information from kernel memory via a crafted app.
Affected Software
1 affected component
Apple iOS and macOS<=10.12.3
Event History
Apr 2, 2017
CVE Published
via MITRE·01:36 AM
Data Sourced
via MITRE·01:36 AM
Description
Data Sourced
via NVD·01:59 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-2489?
CVE-2017-2489 has a high severity rating, indicating a significant risk to affected systems.
2
How do I fix CVE-2017-2489?
To mitigate CVE-2017-2489, upgrade to macOS version 10.12.4 or later.
3
What products are affected by CVE-2017-2489?
CVE-2017-2489 affects macOS versions prior to 10.12.4, specifically those vulnerable under the Intel Graphics Driver component.
4
What kind of attack does CVE-2017-2489 enable?
CVE-2017-2489 allows attackers to obtain sensitive information from kernel memory via a crafted application.
5
Can CVE-2017-2489 be exploited remotely?
CVE-2017-2489 requires local access to exploit, as it relies on a crafted app to access the vulnerable component.