Details of VAR-201603-0152

ID

VAR-201603-0152

CVE

CVE-2016-1744

TITLE

Apple OS X Graphics driver subsystem Intel Driver vulnerable to arbitrary code execution in privileged context

Trust: 0.8

sources: JVNDB: JVNDB-2016-001887

DESCRIPTION

The Intel driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1743. Apple Mac OS X is prone to multiple security vulnerabilities. Attackers can exploit these issues to execute arbitrary code, cause denial-of-service conditions, bypass security restrictions, and perform unauthorized actions. This may aid in other attacks. Apple Mac OS X 10.11 through 10.11.3 are vulnerable. Intel Graphics Driver is one of the graphics driver components

Trust: 1.98

sources: NVD: CVE-2016-1744 // JVNDB: JVNDB-2016-001887 // BID: 85056 // VULHUB: VHN-90563

AFFECTED PRODUCTS

vendor:	apple	model:	mac os x	scope:	lte	version:	10.11.3	Trust: 1.0
vendor:	apple	model:	mac os x	scope:	eq	version:	10.11 to 10.11.3	Trust: 0.8
vendor:	apple	model:	mac os x	scope:	eq	version:	10.11.3	Trust: 0.6

sources: JVNDB: JVNDB-2016-001887 // CNNVD: CNNVD-201603-336 // NVD: CVE-2016-1744

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2016-1744
value:	HIGH
Trust: 1.0
NVD:	CVE-2016-1744
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-201603-336
value:	CRITICAL
Trust: 0.6
VULHUB:	VHN-90563
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2016-1744
severity:	HIGH
baseScore:	9.3
vectorString:	AV:N/AC:M/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.6
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-90563
severity:	HIGH
baseScore:	9.3
vectorString:	AV:N/AC:M/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.6
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2016-1744
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	5.9
version:	3.0
Trust: 1.0

sources: VULHUB: VHN-90563 // JVNDB: JVNDB-2016-001887 // CNNVD: CNNVD-201603-336 // NVD: CVE-2016-1744

PROBLEMTYPE DATA

problemtype:

CWE-119

Trust: 1.9

sources: VULHUB: VHN-90563 // JVNDB: JVNDB-2016-001887 // NVD: CVE-2016-1744

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201603-336

TYPE

buffer overflow

Trust: 0.6

sources: CNNVD: CNNVD-201603-336

CONFIGURATIONS

sources: JVNDB: JVNDB-2016-001887

EXPLOIT AVAILABILITY

sources: VULHUB: VHN-90563

PATCH

title:	Apple security updates	url:	https://support.apple.com/en-us/HT201222	Trust: 0.8
title:	APPLE-SA-2016-03-21-5 OS X El Capitan 10.11.4 and Security Update 2016-002	url:	http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html	Trust: 0.8
title:	HT206167	url:	https://support.apple.com/en-us/HT206167	Trust: 0.8
title:	HT206167	url:	https://support.apple.com/ja-jp/HT206167	Trust: 0.8
title:	Apple OS X Intel Graphics Driver Fixes for arbitrary code execution vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=60662	Trust: 0.6

sources: JVNDB: JVNDB-2016-001887 // CNNVD: CNNVD-201603-336

EXTERNAL IDS

db:	NVD	id:	CVE-2016-1744	Trust: 2.8
db:	EXPLOIT-DB	id:	39616	Trust: 1.1
db:	SECTRACK	id:	1035363	Trust: 1.1
db:	JVN	id:	JVNVU97668313	Trust: 0.8
db:	JVNDB	id:	JVNDB-2016-001887	Trust: 0.8
db:	CNNVD	id:	CNNVD-201603-336	Trust: 0.7
db:	SECUNIA	id:	63459	Trust: 0.6
db:	ZDI	id:	ZDI-16-206	Trust: 0.3
db:	ZDI	id:	ZDI-16-205	Trust: 0.3
db:	ZDI	id:	ZDI-16-202	Trust: 0.3
db:	BID	id:	85056	Trust: 0.3
db:	PACKETSTORM	id:	136354	Trust: 0.1
db:	VULHUB	id:	VHN-90563	Trust: 0.1

sources: VULHUB: VHN-90563 // BID: 85056 // JVNDB: JVNDB-2016-001887 // CNNVD: CNNVD-201603-336 // NVD: CVE-2016-1744

REFERENCES

url:	http://lists.apple.com/archives/security-announce/2016/mar/msg00004.html	Trust: 1.7
url:	https://support.apple.com/ht206167	Trust: 1.1
url:	https://www.exploit-db.com/exploits/39616/	Trust: 1.1
url:	http://www.securitytracker.com/id/1035363	Trust: 1.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-1744	Trust: 0.8
url:	http://jvn.jp/vu/jvnvu97668313/index.html	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2016-1744	Trust: 0.8
url:	https://support.apple.com/en-us/ht206167	Trust: 0.6
url:	http://secunia.com/advisories/63459	Trust: 0.6
url:	https://www.apple.com/	Trust: 0.3
url:	http://www.apple.com/macosx/	Trust: 0.3
url:	http://www.zerodayinitiative.com/advisories/zdi-16-202	Trust: 0.3
url:	http://www.zerodayinitiative.com/advisories/zdi-16-205	Trust: 0.3
url:	http://www.zerodayinitiative.com/advisories/zdi-16-206	Trust: 0.3

sources: VULHUB: VHN-90563 // BID: 85056 // JVNDB: JVNDB-2016-001887 // CNNVD: CNNVD-201603-336 // NVD: CVE-2016-1744

CREDITS

Proteas of Qihoo 360 Nirvan Team, Andrea Barisani and Andrej Rosano of Inverse Path, beist and ABH of BoB, Jeonghoon Shin@A.D.D, HappilyCoded, Ian Beer of Google Project Zero, sweetchip of Grayhash, Piotr Bania of Cisco Talos, Peter Pi, Juwei Lin , Matthe

Trust: 0.3

sources: BID: 85056

SOURCES

db:	VULHUB	id:	VHN-90563
db:	BID	id:	85056
db:	JVNDB	id:	JVNDB-2016-001887
db:	CNNVD	id:	CNNVD-201603-336
db:	NVD	id:	CVE-2016-1744

LAST UPDATE DATE

2024-11-23T19:30:12.944000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-90563	date:	2017-09-08T00:00:00
db:	BID	id:	85056	date:	2016-07-05T21:57:00
db:	JVNDB	id:	JVNDB-2016-001887	date:	2016-03-28T00:00:00
db:	CNNVD	id:	CNNVD-201603-336	date:	2016-03-24T00:00:00
db:	NVD	id:	CVE-2016-1744	date:	2024-11-21T02:46:59.940

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-90563	date:	2016-03-24T00:00:00
db:	BID	id:	85056	date:	2016-03-21T00:00:00
db:	JVNDB	id:	JVNDB-2016-001887	date:	2016-03-28T00:00:00
db:	CNNVD	id:	CNNVD-201603-336	date:	2016-03-23T00:00:00
db:	NVD	id:	CVE-2016-1744	date:	2016-03-24T01:59:14.577