CVE-2014-1376
HighSummary
Apple OS X versions before 10.9.4 have a security vulnerability that improperly restricts OpenCL API calls. This allows attackers to execute arbitrary code via a crafted application.
Risk Assessment
This vulnerability poses a serious security risk as it allows remote code execution, potentially leading to system compromise.
Recommendation
It is recommended to update the operating system to version 10.9.4 or later to mitigate this vulnerability.
Other vulnerabilities in Apple OS X
See all- CVE-2016-4647High
Audio in Apple OS X before 10.11.6 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted file.
- CVE-2016-4641High
The Login Window in Apple OS X before version 10.11.6 allows attackers to execute arbitrary code in a privileged context or obtain sensitive user information via a crafted app that leverages a 'type confusion.'
- CVE-2016-4640High
The Login Window in Apple OS X before version 10.11.6 allows attackers to execute arbitrary code in a privileged context, obtain sensitive user information, or cause a denial of service (memory corruption) via a crafted app.
- CVE-2016-4639High
The Login Window in Apple OS X before 10.11.6 does not properly initialize memory, allowing local users to cause a denial of service via unspecified vectors.
- CVE-2016-4638High
The Login Window in Apple OS X before version 10.11.6 allows attackers to gain privileges via a crafted app that leverages a 'type confusion.'
- CVE-2015-7052High
Kext tools in Apple OS X before 10.11.2 mishandle kernel-extension loading, allowing local users to gain privileges via unspecified vectors.
- CVE-2015-7044High
The System Integrity Protection feature in Apple OS X before 10.11.2 mishandles union mounts, allowing attackers to execute arbitrary code in a privileged context via a crafted app with root privileges.
- CVE-2015-5945High
The Sandbox subsystem in Apple OS X before 10.11.1 allows local users to gain privileges via vectors involving NVRAM parameters.
- CVE-2015-3775High
Apple OS X before 10.10.5 does not properly implement authentication, allowing local users to obtain admin privileges via unspecified vectors.
- CVE-2015-3767High
A vulnerability in Apple OS X before version 10.10.5 allows local users to gain privileges or cause a denial of service through a malformed DMG image.
Original NVD description (English source)
Intel Compute in Apple OS X before 10.9.4 does not properly restrict an unspecified OpenCL API call, which allows attackers to execute arbitrary code via a crafted application.