CVE-2014-4403 in Mac OS X

Summary

The kernel in Apple OS X before 10.9.5 allows local users to obtain sensitive address information and bypass the ASLR protection mechanism by leveraging predictability of the location of the CPU Global Descriptor Table.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 06/20/2014
• Disclosure: 09/19/2014
• Moderation: VulDB entry created
• Entries: VDB-67653 (1)
• CPE: ready
• CWE: CWE-200 (Confirmed)
• CVSS: 5.1
• EPSS: 0.00071
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-4403
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-4403
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-4403/