CVE-2015-1143

High

Published: 10/04/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

LaunchServices in Apple OS X before 10.10.3 allows local users to gain privileges via a crafted localized string, related to a 'type confusion' issue.

Risk Assessment

This vulnerability may allow local users to escalate privileges, posing a significant security risk to the system.

Recommendation

It is recommended to update the system to version 10.10.3 or later to mitigate this vulnerability.

Other vulnerabilities in LaunchServices

CVE-2015-7113High
The LaunchServices component in Apple iOS before 9.2 and watchOS before 2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a malformed plist.

Original NVD description (English source)

LaunchServices in Apple OS X before 10.10.3 allows local users to gain privileges via a crafted localized string, related to a "type confusion" issue.