CVE-2017-13875

Published: Dic 25, 2017 Last Modified: Apr 20, 2025 EU-VD ID: EUVD-2017-5390 Aliases: GSD-2017-13875

ExploitDB:

Other exploit source:

Google Dorks:

HIGH 7,8

Source: [email protected]

Attack Vector: local

Attack Complexity: low

Privileges Required: none

User Interaction: required

Scope: unchanged

Confidentiality: high

Integrity: high

Availability: high

HIGH 9,3

Source: [email protected]

Access Vector: network

Access Complexity: medium

Authentication: none

Confidentiality: complete

Integrity: complete

Availability: complete

Description

AI Translation Available

An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the 'Intel Graphics Driver' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (out-of-bounds read) via a crafted app.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score

0,0127

Percentile

0,8th

Updated

EPSS Score Trend (Last 90 Days)

125

Out-of-bounds Read

Draft

Abstraction: Base Structure: Simple

Common Consequences

Security Scopes Affected:

Confidentiality Availability Other

Potential Impacts:

Read Memory Bypass Protection Mechanism Dos: Crash, Exit, Or Restart Varies By Context

Applicable Platforms

Languages: C, C++, Memory-Unsafe

Technologies: ICS/OT

View CWE Details

Exploit

Apple macOS - Kernel Code Execution due to …

Verified

Apple macOS - Kernel Code Execution due to Lack of Bounds Checking in AppleIntelCapriController::GetLinkConfig

Author: Google Security Research Published: Status: Verified

View Exploit Code →

Operating System

Mac Os X by Apple

Product Information

Vendor Apple

Product Mac Os X

Version Range Affected

To 10.13.2 (exclusive)

CPE Identifier

View Detailed Analysis


                  cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Common Platform Enumeration - Standardized vulnerability identification

https://support.apple.com/HT208331

Vendor Advisory

https://support.apple.com/HT208331

https://www.exploit-db.com/exploits/43327/