Description
Apple Mac OS X before 10.7.5 does not properly handle the bNbrPorts field of a USB hub descriptor, which allows physically proximate attackers to execute arbitrary code or cause a denial of service (memory corruption and system crash) by attaching a USB device.
References
- APPLE-SA-2012-09-19-2 vendor-advisory
- apple-osx-usb-cve20123723(78750) vdb-entry
- http://support.apple.com/kb/HT5501