CVE-2015-1134
HighSummary
A vulnerability in Apple Type Services (ATS) in Apple OS X before version 10.10.3 allows local users to gain privileges via unspecified vectors. This is a different vulnerability than CVE-2015-1131, CVE-2015-1132, CVE-2015-1133, and CVE-2015-1135.
Risk Assessment
The organization may be exposed to unauthorized access to systems by local users, potentially leading to privilege escalation.
Recommendation
It is recommended to update the system to version 10.10.3 or later to mitigate the risk associated with this vulnerability.
Other vulnerabilities in Apple Type Services (ATS)
See all- CVE-2016-4779High
Apple Type Services (ATS) in Apple OS X before 10.12 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.
- CVE-2016-1797High
Apple Type Services (ATS) in Apple OS X before 10.11.5 allows attackers to bypass intended FontValidator sandbox-policy restrictions and execute arbitrary code in a privileged context.
- CVE-2015-1135High
A vulnerability in Apple Type Services (ATS) in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors.
- CVE-2015-1133High
A vulnerability in Apple Type Services (ATS) in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors.
- CVE-2015-1132High
A vulnerability in Apple Type Services (ATS) in Apple OS X before version 10.10.3 allows local users to gain privileges via unspecified vectors.
- CVE-2015-1131High
A vulnerability in Apple Type Services (ATS) in Apple OS X before version 10.10.3 allows local users to gain privileges via unspecified vectors.
Original NVD description (English source)
fontd in Apple Type Services (ATS) in Apple OS X before 10.10.3 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-1131, CVE-2015-1132, CVE-2015-1133, and CVE-2015-1135.