CVE-2014-4390
HighSummary
Bluetooth in Apple OS X before 10.9.5 does not properly validate API calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application.
Risk Assessment
An attacker could exploit this vulnerability to gain access to the system with administrator privileges, posing a serious threat to data and system security.
Recommendation
It is recommended to update the system to version 10.9.5 or later to mitigate this vulnerability.
Other vulnerabilities in Bluetooth w systemie Apple OS X
See all- CVE-2016-4703High
Bluetooth in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
- CVE-2016-1736High
Bluetooth in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Original NVD description (English source)
Bluetooth in Apple OS X before 10.9.5 does not properly validate API calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application.