Apple Mac OS X CVE-2014-1322 Local Security Bypass Vulnerability

Bugtraq ID:	67023
Class:	Design Error
CVE:	CVE-2014-1322
Remote:	No
Local:	Yes
Published:	Apr 22 2014 12:00AM
Updated:	May 21 2014 07:43AM
Credit:	Ian Beer of Google Project Zero
Vulnerable:
Not Vulnerable:

Apple Mac OS X CVE-2014-1322 Local Security Bypass Vulnerability

Apple Mac OS X is prone to a local security-bypass vulnerability.

Attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions.

Apple Mac OS X 10.9.2 is vulnerable; other versions may also be affected.

Apple Mac OS X CVE-2014-1322 Local Security Bypass Vulnerability

An attacker requires local interactive access to exploit the issue.

The following exploit is available:

• /data/vulnerabilities/exploits/67023.c

Apple Mac OS X CVE-2014-1322 Local Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Apple Mac OS X CVE-2014-1322 Local Security Bypass Vulnerability

References:

• Mac OS X Homepage (Apple)