Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.6

Apple macOS before 10.9 lets users read data or crash

CVE-2013-5175 · published 13 years ago
Summary

The core of macOS versions earlier than 10.9 can be fooled by a specially crafted program file, allowing anyone with access to the computer to view private information or make the system stop working. This risk matters because it can expose confidential data or interrupt business operations. Install the Apple update that brings macOS to version 10.9 or later, and keep the system patched regularly.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
apple mac_os_x <= 10.8.5
10.8.0
10.8.1
10.8.2
10.8.3
10.8.4
10.8.5
cpe:2.3:o:apple:mac_os_x:*:supplemental_update:*:*:*:*:*:*
Original advisory text
The kernel in Apple Mac OS X before 10.9 allows local users to obtain sensitive information or cause a denial of service (out-of-bounds read and system crash) via a crafted Mach-O file.
The kernel in Apple Mac OS X before 10.9 allows local users to obtain sensitive information or cause a denial of service (out-of-bounds read and system crash) via a crafted Mach-O file.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
6.6 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-20Improper Input Validation
Timeline
Published24 Oct 2013
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2013-5175 · NVD
Track software like this
Free during beta