Thunderbolt in Apple OS X before 10.9.4 does not properly restrict IOThunderBoltController API calls, which allows attackers to execute arbitrary code or cause a denial of service (out-of-bounds memory access and application crash) via a crafted call.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mac_os_x | Apple | 10.9 (including) | 10.9 (including) |
| Mac_os_x | Apple | 10.9.1 (including) | 10.9.1 (including) |
| Mac_os_x | Apple | 10.9.2 (including) | 10.9.2 (including) |
| Mac_os_x | Apple | 10.9.3 (including) | 10.9.3 (including) |