Apple Mac OS X CVE-2014-4403 Local Security Bypass Vulnerability

Bugtraq ID:	69910
Class:	Design Error
CVE:	CVE-2014-4403
Remote:	No
Local:	Yes
Published:	Sep 17 2014 12:00AM
Updated:	Sep 17 2014 12:00AM
Credit:	Ian Beer of Google Project Zero
Vulnerable:	Apple Mac OS X 10.9.1 Apple Mac OS X 10.9.4 Apple Mac OS X 10.9.3 Apple Mac OS X 10.9.2 Apple Mac OS X 10.9
Not Vulnerable:	Apple Mac OS X 10.9.5

Apple Mac OS X CVE-2014-4403 Local Security Bypass Vulnerability

Apple Mac OS X is prone to a local security-bypass vulnerability.

Attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions.

Apple Mac OS X CVE-2014-4403 Local Security Bypass Vulnerability

An attacker requires local interactive access to exploit the issue.

Apple Mac OS X CVE-2014-4403 Local Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Apple Mac OS X CVE-2014-4403 Local Security Bypass Vulnerability

References:

• APPLE-SA-2014-09-17-3 OS X Mavericks 10.9.5 and Security Update (Apple)
  
• Mac OS X Homepage (Apple)