Apple Mac OS X Server Code Execution Vulnerability (CVE-2014-4395)

Apple Mac OS X Server Code Execution Vulnerability (CVE-2014-4395)

Release date:
Updated on:

Affected Systems:
Apple Mac OS X <10.9.5
Description:
Bugtraq id: 69888
CVE (CAN) ID: CVE-2014-4395

OS x (formerly Mac OS X) is the latest version of Apple's exclusive operating system developed for Mac tower computers.

In versions earlier than Apple OS X 10.9.5, the Integrated Image Driver routine of the Intel Graphics Driver subsystem did not properly verify the call. This allows attackers to execute arbitrary code by constructing an application.

<* Source: Ian Beer

Link: https://www.apple.com/support/security/pgp/
*>

Suggestion:
Vendor patch:

Apple
-----
Apple has released a Security Bulletin (APPLE-SA-2014-09-17-5) and patches for this:
APPLE-SA-2014-09-17-5: OS X Server 3.2.1
Link: https://www.apple.com/support/security/pgp/

This article permanently updates the link address: