CVE-2017-13875
HighSummary
An issue was discovered in certain Apple products, including macOS before 10.13.2, related to the 'Intel Graphics Driver' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (out-of-bounds read) via a crafted app.
Risk Assessment
Organizations may be exposed to arbitrary code execution by attackers, potentially leading to data loss or system takeover. Additionally, the denial of service capability may affect service availability.
Recommendation
It is recommended to update macOS systems to version 10.13.2 or later to mitigate the risk associated with this vulnerability. Monitoring and restricting the execution of applications from unknown sources is also advised.
Other vulnerabilities in Intel Graphics Driver
See all- CVE-2017-7163High
An issue was discovered in certain Apple products, including macOS before version 10.13.2, related to the 'Intel Graphics Driver' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
- CVE-2017-7155High
An issue was discovered in certain Apple products, including macOS before 10.13.2, related to the 'Intel Graphics Driver' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
- CVE-2017-13883High
An issue was discovered in certain Apple products, including macOS before version 10.13.2, related to the 'Intel Graphics Driver' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
- CVE-2017-13878High
An issue was discovered in certain Apple products, including macOS before 10.13.2, related to the 'Intel Graphics Driver' component. It allows local users to bypass intended memory-read restrictions or cause a denial of service (out-of-bounds read and system crash).
- CVE-2017-5717High
A 'Type Confusion' vulnerability in the Content Protection HECI Service in Intel Graphics Driver allows an unprivileged user to elevate privileges via local access.
- CVE-2017-7044High
An issue was discovered in certain Apple products, including macOS before 10.12.6, related to the 'Intel Graphics Driver' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
- CVE-2017-7035High
An issue was discovered in certain Apple products, including macOS before 10.12.6, related to the 'Intel Graphics Driver' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
- CVE-2017-7017High
An issue was discovered in certain Apple products, including macOS before 10.12.6, related to the 'Intel Graphics Driver' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
- CVE-2017-7014High
An issue was discovered in certain Apple products, including macOS before 10.12.6, related to the 'Intel Graphics Driver' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
- CVE-2017-2503High
An issue was discovered in certain Apple products, including macOS before 10.12.5, related to the 'Intel Graphics Driver' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Original NVD description (English source)
An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (out-of-bounds read) via a crafted app.