CVE-2014-1381
Apple OS X < 10.9.4 - Remote Code Execution via Thunderbolt IOThunderBoltController API
Title source: llmDescription
Thunderbolt in Apple OS X before 10.9.4 does not properly restrict IOThunderBoltController API calls, which allows attackers to execute arbitrary code or cause a denial of service (out-of-bounds memory access and application crash) via a crafted call.
References (4)
Core 4
Core References
Vendor Advisory x_refsource_confirm
http://support.apple.com/kb/HT6296
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1030505
Third Party Advisory vendor-advisory
x_refsource_apple
http://archives.neohapsis.com/archives/bugtraq/2014-06/0172.html
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/59475
Scores
EPSS
0.0286
EPSS Percentile
85.3%
Details
CWE
CWE-264
Status
published
Products (4)
apple/mac_os_x
10.9
apple/mac_os_x
10.9.1
apple/mac_os_x
10.9.2
apple/mac_os_x
10.9.3
Published
Jul 01, 2014
Tracked Since
Feb 18, 2026