CVE-2015-5754
HighSummary
A race condition in the Install.framework component in Apple OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context. This issue is due to incorrect privilege dropping associated with a locking error.
Risk Assessment
This vulnerability could lead to unauthorized system access and execution of malicious code, posing a significant security threat to the organization.
Recommendation
It is recommended to update the system to version 10.10.5 or later to mitigate this vulnerability and to monitor applications for potential exploitation attempts.
Other vulnerabilities in Install.framework
Original NVD description (English source)
Race condition in runner in Install.framework in the Install Framework Legacy component in Apple OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages incorrect privilege dropping associated with a locking error.

