EUVD-2015-2978

Malware in sbrugna...

Design/Logic Flaw

Apple Mac EFI before 2015-001, as used in OS X before 10.10.4 and other products, does not enforce a locking protection mechanism upon being woken from sleep, which allows local users to conduct EFI flash attacks by leveraging root privileges...

PT-2015-6290

Name of the Vulnerable Software and Affected Versions Apple Mac EFI versions before 2015-001 OS X versions prior to 10.10.4 Description The issue allows local users to conduct EFI flash attacks by leveraging root privileges, due to the lack of a locking protection mechanism when the system is wok...