Apple Boot Camp 'AppleMNT.sys' Memory Corruption Vulnerability

Bugtraq ID:	65522
Class:	Boundary Condition Error
CVE:	CVE-2014-1253
Remote:	No
Local:	Yes
Published:	Feb 12 2014 12:00AM
Updated:	Feb 17 2014 10:38AM
Credit:	MJ0011 of 360 Security Center
Vulnerable:
Not Vulnerable:

Apple Boot Camp 'AppleMNT.sys' Memory Corruption Vulnerability

Apple Boot Camp is prone to a memory-corruption vulnerability because it fails to perform adequate boundary checks on user-supplied data before copying it into an insufficiently sized memory buffer.

An attacker can exploit this issue to cause the application to crash, denying service to legitimate users. Due to the nature of the issue, code execution may be possible, however, it has not been confirmed.

This issue is fixed in Boot Camp 5.1

Apple Boot Camp 'AppleMNT.sys' Memory Corruption Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apple Boot Camp 'AppleMNT.sys' Memory Corruption Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Apple Boot Camp 'AppleMNT.sys' Memory Corruption Vulnerability

References: