PT-2016-1562

CVE-2016-1744

Published

2016-03-24

Updated

2017-09-08

Description by

CVSS 2.0

9.3

High

MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11.4

Description The issue is caused by a buffer overflow in the Intel driver of the Graphics Drivers subsystem, allowing attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

Recommendations For Apple OS X versions prior to 10.11.4, update to version 10.11.4 or later to resolve the issue. As a temporary workaround, consider restricting the use of crafted apps to minimize the risk of exploitation.

Exploitability

Exploit

Fix

Impacts

Researchers

Ianbeer

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Related identifiers

CVE-2016-1744