AppleMNT.sys in Apple Boot Camp 5 before 5.1 allows local users to cause a denial of service (kernel memory corruption) or possibly have unspecified other impact via a malformed header in a Portable Executable (PE) file.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-1331
http://support.apple.com/kb/HT6126