CVE-2014-4376 IOKit in IOAcceleratorFamily in Apple OS X before 10.9.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via an application t...
HighCVSS 10.0
EPSS 3.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IOKit in IOAcceleratorFamily in Apple OS X before 10.9.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via an application that provides crafted API arguments.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple mac os x | = 10.8.5 | No fix listed |
| apple mac os x | = 10.9 | No fix listed |
| apple mac os x | = 10.9.1 | No fix listed |
| apple mac os x | = 10.9.2 | No fix listed |
| apple mac os x | = 10.9.3 | No fix listed |
| apple mac os x | = 10.9.4 | No fix listed |
References
- support.apple.com vendor-advisory
- 69906 vdb-entry
- 1030868 vdb-entry
- code.google.com
- macosx-cve20144376-code-exec(96051) vdb-entry