CVE-2015-3760
HighSummary
dyld in Apple OS X before 10.10.5 does not properly validate pathnames in the environment, which allows local users to gain privileges via unspecified vectors.
Risk Assessment
This vulnerability may lead to unauthorized access to the system and privilege escalation, posing a serious security threat to the organization.
Recommendation
It is recommended to update the system to version 10.10.5 or later to mitigate this vulnerability.
Other vulnerabilities in dyld
See all- CVE-2016-1738High
A vulnerability in dyld in Apple OS X before 10.11.4 allows attackers to bypass a code-signing protection mechanism via a modified app.
- CVE-2015-7079High
dyld in Apple iOS before 9.2 and tvOS before 9.1 mishandles segment validation, allowing attackers to execute arbitrary code in a privileged context via a crafted app.
- CVE-2015-7072High
A vulnerability in dyld in Apple iOS before 9.2, tvOS before 9.1, and watchOS before 2.1 mishandles segment validation, allowing attackers to execute arbitrary code in a privileged context.
Original NVD description (English source)
dyld in Apple OS X before 10.10.5 does not properly validate pathnames in the environment, which allows local users to gain privileges via unspecified vectors.