CVE-2016-7582
HighSummary
An issue was discovered in certain Apple products, including macOS before 10.12, related to the 'Intel Graphics Driver' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Risk Assessment
Organizations may be exposed to arbitrary code execution by attackers, potentially leading to data loss or system takeover. Additionally, the denial of service capability may impact the availability of critical resources.
Recommendation
It is recommended to update macOS to version 10.12 or later to mitigate this vulnerability. Also, monitor third-party applications and restrict their permissions.
Other vulnerabilities in Intel Graphics Driver
See all- CVE-2017-7163High
An issue was discovered in certain Apple products, including macOS before version 10.13.2, related to the 'Intel Graphics Driver' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
- CVE-2017-7155High
An issue was discovered in certain Apple products, including macOS before 10.13.2, related to the 'Intel Graphics Driver' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
- CVE-2017-13883High
An issue was discovered in certain Apple products, including macOS before version 10.13.2, related to the 'Intel Graphics Driver' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
- CVE-2017-13878High
An issue was discovered in certain Apple products, including macOS before 10.13.2, related to the 'Intel Graphics Driver' component. It allows local users to bypass intended memory-read restrictions or cause a denial of service (out-of-bounds read and system crash).
- CVE-2017-13875High
An issue was discovered in certain Apple products, including macOS before 10.13.2, related to the 'Intel Graphics Driver' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (out-of-bounds read) via a crafted app.
- CVE-2017-5717High
A 'Type Confusion' vulnerability in the Content Protection HECI Service in Intel Graphics Driver allows an unprivileged user to elevate privileges via local access.
- CVE-2017-7044High
An issue was discovered in certain Apple products, including macOS before 10.12.6, related to the 'Intel Graphics Driver' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
- CVE-2017-7035High
An issue was discovered in certain Apple products, including macOS before 10.12.6, related to the 'Intel Graphics Driver' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
- CVE-2017-7017High
An issue was discovered in certain Apple products, including macOS before 10.12.6, related to the 'Intel Graphics Driver' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
- CVE-2017-7014High
An issue was discovered in certain Apple products, including macOS before 10.12.6, related to the 'Intel Graphics Driver' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Original NVD description (English source)
An issue was discovered in certain Apple products. macOS before 10.12 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.