cnvd-2019-12502
Vulnerability from cnvd
Title
Apple macOS High Sierra和Apple macOS Mojave Intel Graphics Driver组件内存破坏漏洞
Description
Apple macOS Mojave和Apple macOS High Sierra都是美国苹果（Apple）公司的产品。Apple macOS Mojave是一套专为Mac计算机所开发的专用操作系统。Apple macOS High Sierra是一套专为Mac计算机所开发的专用操作系统。Intel Graphics Driver是其中的一个集成显卡驱动程序。 Apple macOS High Sierra 10.13.6之前版本和macOS Mojave 10.14之前版本中的Intel Graphics Driver组件存在安全漏洞。攻击者可利用漏洞以内核权限执行任意代码。
Severity
高
Patch Name
Apple macOS High Sierra和Apple macOS Mojave Intel Graphics Driver组件内存破坏漏洞的补丁
Patch Description
Apple macOS Mojave和Apple macOS High Sierra都是美国苹果（Apple）公司的产品。Apple macOS Mojave是一套专为Mac计算机所开发的专用操作系统。Apple macOS High Sierra是一套专为Mac计算机所开发的专用操作系统。Intel Graphics Driver是其中的一个集成显卡驱动程序。 Apple macOS High Sierra 10.13.6之前版本和macOS Mojave 10.14之前版本中的Intel Graphics Driver组件存在安全漏洞。攻击者可利用漏洞以内核权限执行任意代码。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://support.apple.com/zh-cn/HT208937

Reference
https://support.apple.com/zh-cn/HT208937
Impacted products
Name
['Apple macOS High Sierra <10.13.6', 'Apple macOS Mojave <10.14']
Show details on source website

To clipboard 

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-4456",
      "cveUrl": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4456"
    }
  },
  "description": "Apple macOS Mojave\u548cApple macOS High Sierra\u90fd\u662f\u7f8e\u56fd\u82f9\u679c\uff08Apple\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Apple macOS Mojave\u662f\u4e00\u5957\u4e13\u4e3aMac\u8ba1\u7b97\u673a\u6240\u5f00\u53d1\u7684\u4e13\u7528\u64cd\u4f5c\u7cfb\u7edf\u3002Apple macOS High Sierra\u662f\u4e00\u5957\u4e13\u4e3aMac\u8ba1\u7b97\u673a\u6240\u5f00\u53d1\u7684\u4e13\u7528\u64cd\u4f5c\u7cfb\u7edf\u3002Intel Graphics Driver\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u96c6\u6210\u663e\u5361\u9a71\u52a8\u7a0b\u5e8f\u3002\n\nApple macOS High Sierra 10.13.6\u4e4b\u524d\u7248\u672c\u548cmacOS Mojave 10.14\u4e4b\u524d\u7248\u672c\u4e2d\u7684Intel Graphics Driver\u7ec4\u4ef6\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u4ee5\u5185\u6838\u6743\u9650\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002",
  "discovererName": "Tyler Bohan of Cisco Talos",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://support.apple.com/zh-cn/HT208937",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2019-12502",
  "openTime": "2019-04-26",
  "patchDescription": "Apple macOS Mojave\u548cApple macOS High Sierra\u90fd\u662f\u7f8e\u56fd\u82f9\u679c\uff08Apple\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Apple macOS Mojave\u662f\u4e00\u5957\u4e13\u4e3aMac\u8ba1\u7b97\u673a\u6240\u5f00\u53d1\u7684\u4e13\u7528\u64cd\u4f5c\u7cfb\u7edf\u3002Apple macOS High Sierra\u662f\u4e00\u5957\u4e13\u4e3aMac\u8ba1\u7b97\u673a\u6240\u5f00\u53d1\u7684\u4e13\u7528\u64cd\u4f5c\u7cfb\u7edf\u3002Intel Graphics Driver\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u96c6\u6210\u663e\u5361\u9a71\u52a8\u7a0b\u5e8f\u3002\r\n\r\nApple macOS High Sierra 10.13.6\u4e4b\u524d\u7248\u672c\u548cmacOS Mojave 10.14\u4e4b\u524d\u7248\u672c\u4e2d\u7684Intel Graphics Driver\u7ec4\u4ef6\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u4ee5\u5185\u6838\u6743\u9650\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Apple macOS High Sierra\u548cApple macOS Mojave Intel Graphics Driver\u7ec4\u4ef6\u5185\u5b58\u7834\u574f\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Apple macOS High Sierra \u003c10.13.6",
      "Apple macOS Mojave \u003c10.14"
    ]
  },
  "referenceLink": "https://support.apple.com/zh-cn/HT208937",
  "serverity": "\u9ad8",
  "submitTime": "2019-04-08",
  "title": "Apple macOS High Sierra\u548cApple macOS Mojave Intel Graphics Driver\u7ec4\u4ef6\u5185\u5b58\u7834\u574f\u6f0f\u6d1e"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.