CVE-2014-1379

Vulnerability

A NULL pointer dereference vulnerability exists in the Graphics Drivers component of Apple OS X. The flaw is triggered when a crafted 32-bit executable file is run. Affected versions include OS X Mavericks 10.9 through 10.9.3, as well as earlier versions such as OS X Lion and Mountain Lion (as indicated by the security update scope). The vulnerability can be exploited by any application that can execute a malicious 32-bit binary, leading to a kernel-level crash or potential privilege escalation.

Exploitation

An attacker must have the ability to run a crafted 32-bit executable on the target system. No special privileges are required to launch the application; the exploit occurs when the Graphics Drivers process the malformed executable. The attacker does not need network access if they can already execute code locally. The exploitation sequence involves the attacker providing a specially crafted 32-bit binary that triggers a NULL pointer dereference in the graphics driver code.

Impact

Successful exploitation can result in either a denial of service (system crash due to the NULL pointer dereference) or privilege escalation. If the attacker achieves privilege escalation, they may gain elevated system privileges, potentially leading to full control of the affected system. The impact is limited to the local system and requires the attacker to have some level of local access.

Mitigation

Apple addressed this vulnerability in OS X Mavericks v10.9.4, released on July 1, 2014. The update is available via Software Update or from the Apple Support website [1]. No workarounds are documented. Users should apply the update to all affected versions, including OS X Lion, Mountain Lion, and Mavericks. This CVE is not listed on the CISA Known Exploited Vulnerabilities (KEV) catalog.