What is the CVSS score of CVE-2014-1253?

CVE-2014-1253 has a CVSS 2.0 base score of 4.7 (Medium). CVSS vector: AV:L/AC:M/Au:N/C:N/I:N/A:C. EPSS exploitation probability: 0.1%.

Boot Camp CVE-2014-1253

MEDIUM

Buffer Overflow (CWE-119)

2014-02-14 product-security@apple.com

Buffer Overflow Denial Of Service Apple Boot Camp

4.7

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

4.7 MEDIUM

AV:L/AC:M/Au:N/C:N/I:N/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:M/Au:N/C:N/I:N/A:C

Attack Vector

Local

Attack Complexity

Confidentiality

None

Integrity

None

Availability

Lifecycle Timeline

CVE Published

Feb 14, 2014 - 13:10 cve.org

MEDIUM 4.7

DescriptionCVE.org

AppleMNT.sys in Apple Boot Camp 5 before 5.1 allows local users to cause a denial of service (kernel memory corruption) or possibly have unspecified other impact via a malformed header in a Portable Executable (PE) file.

AnalysisAI

Technical ContextAI

This vulnerability is classified as Buffer Overflow (CWE-119), which allows attackers to corrupt memory to execute arbitrary code or crash the application. AppleMNT.sys in Apple Boot Camp 5 before 5.1 allows local users to cause a denial of service (kernel memory corruption) or possibly have unspecified other impact via a malformed header in a Portable Executable (PE) file. Affected products include: Apple Boot Camp. Version information: before 5.1.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use memory-safe languages or bounds-checking. Enable ASLR, DEP/NX, stack canaries. Use safe string functions.