CVE-2015-5784

High

Published: 17/08/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The Install Framework Legacy component in Apple OS X before version 10.10.5 has a vulnerability that does not properly drop privileges, allowing attackers to execute arbitrary code in a privileged context via a crafted app.

Risk Assessment

This vulnerability poses a risk that malicious software could gain access to the system with elevated privileges, potentially leading to serious security breaches.

Recommendation

It is recommended to update the system to version 10.10.5 or later to mitigate this vulnerability and to monitor applications installed on the system.

Other vulnerabilities in Install.framework

CVE-2015-5754High
A race condition in the Install.framework component in Apple OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context. This issue is due to incorrect privilege dropping associated with a locking error.

Original NVD description (English source)

runner in Install.framework in the Install Framework Legacy component in Apple OS X before 10.10.5 does not properly drop privileges, which allows attackers to execute arbitrary code in a privileged context via a crafted app.