Main
Vulnerability Database
Exploits
ID:5113 - Exploit for Information disclosure in macOS - CVE-2014-1322
ID:5113 - Exploit for Information disclosure in macOS - CVE-2014-1322
Published: February 4, 2021
Vulnerability identifier: #VU41769
Vulnerability risk: Medium
CVE-ID: CVE-2014-1322
CWE-ID: CWE-200
Exploitation vector: Remote access
Vulnerable software:
macOS
macOS
Link to public exploit:
Vulnerability description
The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.
The kernel in Apple OS X through 10.9.2 places a kernel pointer into an XNU object data structure accessible from user space, which makes it easier for local users to bypass the ASLR protection mechanism by reading an unspecified attribute of the object.
Remediation
Install update from vendor's website.