exploitDog

CVE-2014-4396

Опубликовано: 19 сент. 2014

Источник: nvd

CVSS2: 6.9

EPSS Низкий

Описание

An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application, a different vulnerability than CVE-2014-4394, CVE-2014-4395, CVE-2014-4397, CVE-2014-4398, CVE-2014-4399, CVE-2014-4400, CVE-2014-4401, and CVE-2014-4416.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:mac_os_x:10.8.5:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:10.9:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:10.9.1:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:10.9.2:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:10.9.3:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:10.9.4:*:*:*:*:*:*:*

EPSS

Процентиль: 49%

0.00257

Низкий

6.9 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-v42q-3c7x-2vvj

github

больше 3 лет назад

An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application, a different vulnerability than CVE-2014-4394, CVE-2014-4395, CVE-2014-4397, CVE-2014-4398, CVE-2014-4399, CVE-2014-4400, CVE-2014-4401, and CVE-2014-4416.

EPSS

Процентиль: 49%

0.00257

Низкий

6.9 Medium

CVSS2

Дефекты

CWE-20