CVE-2014-8824
HighSummary
The kernel in Apple OS X before 10.10.2 does not properly validate IODataQueue object metadata fields, allowing attackers to execute arbitrary code in a privileged context.
Risk Assessment
Attackers can exploit this vulnerability to gain access to the system with elevated privileges, posing a serious security threat to the organization.
Recommendation
It is recommended to update the system to version 10.10.2 or later to mitigate this vulnerability.
Other vulnerabilities in Jądro systemu Apple OS X
See all- CVE-2016-1759High
The kernel in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
- CVE-2015-5932High
The kernel in Apple OS X before 10.11.1 allows local users to gain privileges by leveraging an unspecified 'type confusion' during Mach task processing.
- CVE-2015-3761High
The kernel in Apple OS X before 10.10.5 does not properly validate pathnames in the environment, allowing local users to gain privileges via unspecified vectors.
- CVE-2014-8825High
The kernel in Apple OS X before 10.10.2 does not properly perform identitysvc validation of certain directory-service functionality, allowing local users to gain privileges or spoof directory-service responses.
Original NVD description (English source)
The kernel in Apple OS X before 10.10.2 does not properly validate IODataQueue object metadata fields, which allows attackers to execute arbitrary code in a privileged context via a crafted app.