Apple Mac OS X Prior to 10.9.4 Multiple Security Vulnerabilities
BID:68272
Info
Apple Mac OS X Prior to 10.9.4 Multiple Security Vulnerabilities
| Bugtraq ID: | 68272 |
| Class: | Unknown |
| CVE: |
CVE-2014-1370 CVE-2014-1371 CVE-2014-1372 CVE-2014-1317 CVE-2014-1373 CVE-2014-1375 CVE-2014-1376 CVE-2014-1377 CVE-2014-1378 CVE-2014-1379 CVE-2014-1380 CVE-2014-1381 |
| Remote: | Yes |
| Local: | Yes |
| Published: | Jun 30 2014 12:00AM |
| Updated: | Jul 21 2014 12:30AM |
| Credit: | Chaitanya (SegFault) working with iDefense VCP, an anonymous researcher working with HP's Zero Day Initiative, Ian Beer of Google Project Zero, Steve Dunham, Apple, Ben Langfeld of Mojo Lingo LLC and Catherine aka winocm. |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Apple Mac OS X Prior to 10.9.4 Multiple Security Vulnerabilities
Apple Mac OS X is prone to multiple security vulnerabilities that have been addressed in Security Update 2014-003.
The update addresses new vulnerabilities that affect copyfile, Dock,Graphics Driver , iBooks Commerce, Intel Graphics Driver, Intel Compute, IOAcceleratorFamily, IOGraphicsFamily, Security - Keychain, and Thunderbolt.
Attackers can exploit these issues to execute arbitrary code, gain unauthorized access, bypass security restrictions, and perform other attacks. Failed attacks may cause denial-of-service conditions.
These issues affect OS X prior to 10.9.4.
Apple Mac OS X is prone to multiple security vulnerabilities that have been addressed in Security Update 2014-003.
The update addresses new vulnerabilities that affect copyfile, Dock,Graphics Driver , iBooks Commerce, Intel Graphics Driver, Intel Compute, IOAcceleratorFamily, IOGraphicsFamily, Security - Keychain, and Thunderbolt.
Attackers can exploit these issues to execute arbitrary code, gain unauthorized access, bypass security restrictions, and perform other attacks. Failed attacks may cause denial-of-service conditions.
These issues affect OS X prior to 10.9.4.
Exploit / POC
Apple Mac OS X Prior to 10.9.4 Multiple Security Vulnerabilities
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Note: Some of these issues will not require specific exploit code and may be trivial to exploit.
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Note: Some of these issues will not require specific exploit code and may be trivial to exploit.
Solution / Fix
Apple Mac OS X Prior to 10.9.4 Multiple Security Vulnerabilities
Solution:
Vendor updates are available. Please see the references for more information.
Solution:
Vendor updates are available. Please see the references for more information.
References
Apple Mac OS X Prior to 10.9.4 Multiple Security Vulnerabilities
References:
References:
- Mac OS X Homepage (Apple)