{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2014-06-30T00:00:00", "descriptions": [{"lang": "en", "value": "Graphics Driver in Apple OS X before 10.9.4 does not properly restrict read operations during processing of an unspecified system call, which allows local users to obtain sensitive information from kernel memory and bypass the ASLR protection mechanism via a crafted call."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2014-11-28T05:57:01", "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "shortName": "apple"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://support.apple.com/kb/HT6296"}, {"name": "1030505", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id/1030505"}, {"name": "APPLE-SA-2014-06-30-2", "tags": ["vendor-advisory", "x_refsource_APPLE"], "url": "http://archives.neohapsis.com/archives/bugtraq/2014-06/0172.html"}, {"tags": ["x_refsource_MISC"], "url": "https://code.google.com/p/google-security-research/issues/detail?id=18"}, {"name": "59475", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/59475"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "product-security@apple.com", "ID": "CVE-2014-1372", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Graphics Driver in Apple OS X before 10.9.4 does not properly restrict read operations during processing of an unspecified system call, which allows local users to obtain sensitive information from kernel memory and bypass the ASLR protection mechanism via a crafted call."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://support.apple.com/kb/HT6296", "refsource": "CONFIRM", "url": "http://support.apple.com/kb/HT6296"}, {"name": "1030505", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1030505"}, {"name": "APPLE-SA-2014-06-30-2", "refsource": "APPLE", "url": "http://archives.neohapsis.com/archives/bugtraq/2014-06/0172.html"}, {"name": "https://code.google.com/p/google-security-research/issues/detail?id=18", "refsource": "MISC", "url": "https://code.google.com/p/google-security-research/issues/detail?id=18"}, {"name": "59475", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/59475"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T09:42:34.866Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://support.apple.com/kb/HT6296"}, {"name": "1030505", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id/1030505"}, {"name": "APPLE-SA-2014-06-30-2", "tags": ["vendor-advisory", "x_refsource_APPLE", "x_transferred"], "url": "http://archives.neohapsis.com/archives/bugtraq/2014-06/0172.html"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://code.google.com/p/google-security-research/issues/detail?id=18"}, {"name": "59475", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/59475"}]}]}, "cveMetadata": {"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c", "assignerShortName": "apple", "cveId": "CVE-2014-1372", "datePublished": "2014-07-01T10:00:00", "dateReserved": "2014-01-08T00:00:00", "dateUpdated": "2024-08-06T09:42:34.866Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "matchCriteriaId": "8EB864BA-7FED-47E3-9391-B89598594AF8", "versionEndIncluding": "10.9.3", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.8.0:*:*:*:*:*:*:*", "matchCriteriaId": "B2082D62-3821-4DBA-8690-67489F44C38D", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.8.1:*:*:*:*:*:*:*", "matchCriteriaId": "8F0DB1BC-DC16-423E-B0C7-8E9C996A50B5", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.8.2:*:*:*:*:*:*:*", "matchCriteriaId": "E59315BA-B9F1-46A5-86E7-8BE2ED97BA4F", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.8.3:*:*:*:*:*:*:*", "matchCriteriaId": "55841123-F78F-42E0-8D40-C688C4B4D29C", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.8.4:*:*:*:*:*:*:*", "matchCriteriaId": "252640D3-5CB8-4C3D-9E8B-ED452293C805", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.8.5:*:*:*:*:*:*:*", "matchCriteriaId": "F3D30B4B-DA63-40B0-B0C9-F3992CF25706", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.8.5:supplemental_update:*:*:*:*:*:*", "matchCriteriaId": "2F1DAD30-BA77-40C2-9245-05DF871FDDC0", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.9:*:*:*:*:*:*:*", "matchCriteriaId": "A48A5310-A589-4E9B-99BC-F840CC1A6A44", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.9.1:*:*:*:*:*:*:*", "matchCriteriaId": "F241EBFB-CCB3-4D16-B476-AC1578D3C435", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.9.2:*:*:*:*:*:*:*", "matchCriteriaId": "7AEAD650-87D1-49BB-A8C7-BA39FD47285C", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Graphics Driver in Apple OS X before 10.9.4 does not properly restrict read operations during processing of an unspecified system call, which allows local users to obtain sensitive information from kernel memory and bypass the ASLR protection mechanism via a crafted call."}, {"lang": "es", "value": "Graphics Driver en Apple OS X anterior a 10.9.4 no restringe debidamente operaciones de lectura durante el procesamiento de una llamada del sistema no especificada, lo que permite a usuarios locales obtener informaci\u00f3n sensible de la memoria del kernel y evadir el mecanismo de protecci\u00f3n ASLR a trav\u00e9s de una llamada manipulada."}], "id": "CVE-2014-1372", "lastModified": "2015-11-20T16:10:19.243", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.9, "confidentialityImpact": "COMPLETE", "integrityImpact": "NONE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 6.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2014-07-01T10:17:27.220", "references": [{"source": "product-security@apple.com", "url": "http://archives.neohapsis.com/archives/bugtraq/2014-06/0172.html"}, {"source": "product-security@apple.com", "url": "http://secunia.com/advisories/59475"}, {"source": "product-security@apple.com", "url": "http://support.apple.com/kb/HT6296"}, {"source": "product-security@apple.com", "url": "http://www.securitytracker.com/id/1030505"}, {"source": "product-security@apple.com", "tags": ["Exploit"], "url": "https://code.google.com/p/google-security-research/issues/detail?id=18"}], "sourceIdentifier": "product-security@apple.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-264"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}