CVE-2017-13878

high

Description

An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Intel Graphics Driver" component. It allows local users to bypass intended memory-read restrictions or cause a denial of service (out-of-bounds read and system crash).

References

http://www.securityfocus.com/bid/102099

http://www.securitytracker.com/id/1039966

https://support.apple.com/HT208331

https://www.exploit-db.com/exploits/43780/

Details

Source: MITRE

Published: 2017-12-25

Updated: 2018-01-22

Type: CWE-125

Risk Information

CVSS v2

Base Score: 5.6

Vector: AV:L/AC:L/Au:N/C:P/I:N/A:C

Impact Score: 7.8

Exploitability Score: 3.9

Severity: MEDIUM

CVSS v3

Base Score: 7.1

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Impact Score: 5.2

Exploitability Score: 1.8

Severity: HIGH