Array index error in IOAcceleratorFamily in Apple OS X before 10.9.4 allows attackers to execute arbitrary code via a crafted application.

The remote host is running a version of Mac OS X that is older than 10.9.4, and is thus missing security-related fixes for the following components:

  - Certificate Trust Policy
  - copyfile
  - curl
  - Dock
  - Graphics Driver
  - iBooks Commerce
  - Intel Graphics Driver
  - Intel Compute
  - IOAcceleratorFamily
  - IOReporting
  - Keychain
  - launchd
  - Secure Transport
  - Thunderbolt

Note that successful exploitation of the most serious issues could result in arbitrary code execution.

The remote host is running a version of Mac OS X 10.7 or 10.8 that does not have Security Update 2014-003 applied. This update contains several security-related fixes for the following components :

  - copyfile
  - Dock
  - Graphics Driver
  - Intel Graphics Driver
  - Intel Compute
  - IOAcceleratorFamily
  - Secure Transport

Note that successful exploitation of the most serious issues could result in arbitrary code execution.

The remote host is running a version of Mac OS X 10.9.x that is prior to 10.9.4. This update contains several security-related fixes for the following components :

  - Certificate Trust Policy
  - copyfile
  - curl
  - Dock
  - Graphics Driver
  - iBooks Commerce
  - Intel Graphics Driver
  - Intel Compute
  - IOAcceleratorFamily
  - IOReporting
  - Keychain
  - launchd
  - Secure Transport
  - Thunderbolt

Note that successful exploitation of the most serious issues could result in arbitrary code execution.

ID	Name	Product	Family	Severity
8321	Mac OS X < 10.9.4 Multiple Vulnerabilities (Security Update 2014-003)	Nessus Network Monitor	Web Clients	critical
76318	Mac OS X Multiple Vulnerabilities (Security Update 2014-003)	Nessus	MacOS X Local Security Checks	critical
76317	Mac OS X 10.9.x < 10.9.4 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	critical

Detections

Analytics

CVE-2014-1377

high

Tenable Plugins

critical

critical

critical