CVE-2015-3761
HighSummary
The kernel in Apple OS X before 10.10.5 does not properly validate pathnames in the environment, allowing local users to gain privileges via unspecified vectors.
Risk Assessment
This vulnerability may lead to unauthorized access to the system and potential takeover by local users.
Recommendation
It is recommended to update the system to version 10.10.5 or later to mitigate this vulnerability.
Other vulnerabilities in Jądro systemu Apple OS X
See all- CVE-2016-1759High
The kernel in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
- CVE-2015-5932High
The kernel in Apple OS X before 10.11.1 allows local users to gain privileges by leveraging an unspecified 'type confusion' during Mach task processing.
- CVE-2014-8825High
The kernel in Apple OS X before 10.10.2 does not properly perform identitysvc validation of certain directory-service functionality, allowing local users to gain privileges or spoof directory-service responses.
- CVE-2014-8824High
The kernel in Apple OS X before 10.10.2 does not properly validate IODataQueue object metadata fields, allowing attackers to execute arbitrary code in a privileged context.
Original NVD description (English source)
The kernel in Apple OS X before 10.10.5 does not properly validate pathnames in the environment, which allows local users to gain privileges via unspecified vectors.