PT-2016-2784
CVE-2016-4697
·
Published
2016-09-20
·
Updated
2017-07-30
Description by
CVSS 2.0
9.3
HighMetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Apple OS X versions prior to 10.12
Description
The issue allows attackers to execute arbitrary code in a privileged context or cause a denial of service due to memory corruption via a crafted app. It is related to a buffer overflow privilege escalation vulnerability in the AppleHSSPIHIDDriver.
Recommendations
For versions prior to 10.12, update to version 10.12 or later to resolve the issue. As a temporary workaround, consider restricting access to privileged contexts to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾