Lucene search
AppleCVE-2015-7044HistoryDec 11, 2015 - 11:59 a.m.
CVE-2015-7044
2015-12-1111:59:09
CWE-254
apple
web.nvd.nist.gov
25
cve-2015-7044
apple
os x
system integrity protection
union mounts
privilege escalation
arbitrary code execution
CVSS2
7.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
AI Score
8.5
Confidence
High
EPSS
0.003
Percentile
68.8%
The System Integrity Protection feature in Apple OS X before 10.11.2 mishandles union mounts, which allows attackers to execute arbitrary code in a privileged context via a crafted app with root privileges.
Affected configurations
Node
applemac_os_xRange≤10.11.1
Related
nvd
nvd
CVE-2015-7044
2015-12-11 11:59:09
cvelist
cvelist
CVE-2015-7044
2015-12-11 11:00:00
prion
prion
Design/Logic Flaw
2015-12-11 11:59:00
nessus
nessus
Mac OS X Multiple Vulnerabilities (Security Updates 2015-005 / 2015-008)
2015-12-11 00:00:00
Mac OS X 10.11.x < 10.11.2 Multiple Vulnerabilities
2015-12-10 00:00:00
openvas
openvas
Apple Mac OS X Multiple Vulnerabilities-01 (Dec 2015)
2015-12-15 00:00:00
CVSS2
7.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
AI Score
8.5
Confidence
High
EPSS
0.003
Percentile
68.8%
Related for CVE-2015-7044