Mac OS X < 10.11 Multiple Vulnerabilities

Binary data 8982.prm...

Mac OS X Privilege Escalation

The vulnerability of the Install Framework Legacy component in the Mac OS X operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow an attacker, operating locally, to gain root user privileges...

Mac OS X < 10.10.4 Multiple Vulnerabilities

Binary data 8801.prm...

CVE-2015-5888

The Install Framework Legacy component in Apple OS X before 10.11 allows local users to obtain root privileges via vectors involving a privileged executable file...

CVE-2015-5888

The Install Framework Legacy component in Apple OS X before 10.11 allows local users to obtain root privileges via vectors involving a privileged executable file...

PT-2015-2286

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11 Description The issue is related to the Install Framework Legacy component, which has inadequate access control to certain functions. This can be exploited by a local attacker to gain root privileges...

CVE-2015-5888: Undefined Security Weakness

The Install Framework Legacy component in Apple OS X before 10.11 allows local users to obtain root privileges via vectors involving a privileged executable file...

Mac OS X Privilege Escalation

The vulnerability of the Install Framework Legacy component in the Mac OS X operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code in a privileged context through a specially crafted applicatio...

Mac OS X Privilege Escalation

The vulnerability of the Install Framework Legacy component in the Mac OS X operating system is related to deficiencies in the privilege termination process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context through a specially crafted...

Design/Logic Flaw

runner in Install.framework in the Install Framework Legacy component in Apple OS X before 10.10.5 does not properly drop privileges, which allows attackers to execute arbitrary code in a privileged context via a crafted app...

CVE-2015-5754: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in runner in Install.framework in the Install Framework Legacy component in Apple OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages incorrect privilege dropping associated with a locking error...

CVE-2015-5784: Undefined Security Weakness

runner in Install.framework in the Install Framework Legacy component in Apple OS X before 10.10.5 does not properly drop privileges, which allows attackers to execute arbitrary code in a privileged context via a crafted app...

PT-2015-1806

Name of the Vulnerable Software and Affected Versions Install Framework Legacy versions prior to 10.10.5 Description The issue is related to a flaw in the privilege dropping procedure of the Install Framework Legacy component in Mac OS X. This flaw can be exploited by a remote attacker using a...

PT-2015-1797

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.10.5 Description The issue is caused by a race condition in the Install Framework Legacy component, specifically in the runner in Install.framework. This condition can be exploited by a remote attacker using a...

PT-2015-6302

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.10.4 Description The issue is related to the runner in Install.framework, which is part of the Install Framework Legacy subsystem. It does not properly drop privileges, allowing attackers to execute arbitrary co...

CVE-2015-3704: Undefined Security Weakness

runner in Install.framework in the Install Framework Legacy subsystem in Apple OS X before 10.10.4 does not properly drop privileges, which allows attackers to execute arbitrary code in a privileged context via a crafted app...

Mac OS X Multiple Vulnerabilities (Security Update 2015-005) (GHOST) (Logjam)

The remote host is running a version of Mac OS X 10.8.5 or 10.9.5 that is missing Security Update 2015-005. It is, therefore, affected multiple vulnerabilities in the following components : - Admin Framework - afpserver - apache - AppleFSCompression - AppleGraphicsControl -...

Mac OS X 10.10.x < 10.10.4 Multiple Vulnerabilities (GHOST) (Logjam)

The remote host is running a version of Mac OS X 10.10.x that is prior to 10.10.4. It is, therefore, affected multiple vulnerabilities in the following components : - Admin Framework - afpserver - apache - AppleFSCompression - AppleGraphicsControl - AppleThunderboltEDMService - ATS - Bluetooth -...