CVE Catalog

CVE-2015-5754

High
Published: Translated: NVD NIST

Summary

A race condition in the Install.framework component in Apple OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context. This issue is due to incorrect privilege dropping associated with a locking error.

Risk Assessment

This vulnerability could lead to unauthorized system access and execution of malicious code, posing a significant security threat to the organization.

Recommendation

It is recommended to update the system to version 10.10.5 or later to mitigate this vulnerability and to monitor applications for potential exploitation attempts.

Other vulnerabilities in Install.framework

Original NVD description (English source)

Race condition in runner in Install.framework in the Install Framework Legacy component in Apple OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages incorrect privilege dropping associated with a locking error.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS