CVE-2014-8825
HighSummary
The kernel in Apple OS X before 10.10.2 does not properly perform identitysvc validation of certain directory-service functionality, allowing local users to gain privileges or spoof directory-service responses.
Risk Assessment
Local users may exploit this vulnerability to gain unauthorized privileges, potentially leading to serious security breaches in the system.
Recommendation
It is recommended to update the system to version 10.10.2 or later to mitigate this vulnerability.
Other vulnerabilities in Jądro systemu Apple OS X
See all- CVE-2016-1759High
The kernel in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
- CVE-2015-5932High
The kernel in Apple OS X before 10.11.1 allows local users to gain privileges by leveraging an unspecified 'type confusion' during Mach task processing.
- CVE-2015-3761High
The kernel in Apple OS X before 10.10.5 does not properly validate pathnames in the environment, allowing local users to gain privileges via unspecified vectors.
- CVE-2014-8824High
The kernel in Apple OS X before 10.10.2 does not properly validate IODataQueue object metadata fields, allowing attackers to execute arbitrary code in a privileged context.
Original NVD description (English source)
The kernel in Apple OS X before 10.10.2 does not properly perform identitysvc validation of certain directory-service functionality, which allows local users to gain privileges or spoof directory-service responses via unspecified vectors.