Mac OS X < 10.11 Multiple Vulnerabilities

Binary data 8982.prm...

Mac OS X Privilege Escalation

The vulnerability of the Install Framework Legacy component in the Mac OS X operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow an attacker, operating locally, to gain root user privileges...

Mac OS X < 10.10.4 Multiple Vulnerabilities

Binary data 8801.prm...

CVE-2015-5888

The Install Framework Legacy component in Apple OS X before 10.11 allows local users to obtain root privileges via vectors involving a privileged executable file...

CVE-2015-5888

The Install Framework Legacy component in Apple OS X before 10.11 allows local users to obtain root privileges via vectors involving a privileged executable file...

CVE-2015-5888: Undefined Security Weakness

The Install Framework Legacy component in Apple OS X before 10.11 allows local users to obtain root privileges via vectors involving a privileged executable file...

PT-2015-2286

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11 Description The issue is related to the Install Framework Legacy component, which has inadequate access control to certain functions. This can be exploited by a local attacker to gain root privileges...

Mac OS X Privilege Escalation

The vulnerability of the Install Framework Legacy component in the Mac OS X operating system is related to deficiencies in the privilege termination process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context through a specially crafted...

Mac OS X Privilege Escalation

The vulnerability of the Install Framework Legacy component in the Mac OS X operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code in a privileged context through a specially crafted applicatio...

Apple OS X 'Install.framework' 'runner' elevation of privilege vulnerability (CNVD-2015-05546)

Apple OS X is a BSD-based operating system distributed by Apple. A security vulnerability in 'Install.framework' 'runner' in the Apple OS X privilege manager allows remote users to exploit the vulnerability to execute arbitrary code with root privileges...

Apple OS X 'Install.framework' 'runner' elevation of privilege vulnerability

Apple OS X is a BSD-based operating system distributed by Apple. A security vulnerability in 'Install.framework' 'runner' in the Apple OS X privilege manager allows remote users to exploit the vulnerability to execute arbitrary code with root privileges...

Design/Logic Flaw

runner in Install.framework in the Install Framework Legacy component in Apple OS X before 10.10.5 does not properly drop privileges, which allows attackers to execute arbitrary code in a privileged context via a crafted app...

CVE-2015-5754

Race condition in runner in Install.framework in the Install Framework Legacy component in Apple OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages incorrect privilege dropping associated with a locking error...

CVE-2015-5754: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in runner in Install.framework in the Install Framework Legacy component in Apple OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages incorrect privilege dropping associated with a locking error...

CVE-2015-5784: Undefined Security Weakness

runner in Install.framework in the Install Framework Legacy component in Apple OS X before 10.10.5 does not properly drop privileges, which allows attackers to execute arbitrary code in a privileged context via a crafted app...

PT-2015-1806

Name of the Vulnerable Software and Affected Versions Install Framework Legacy versions prior to 10.10.5 Description The issue is related to a flaw in the privilege dropping procedure of the Install Framework Legacy component in Mac OS X. This flaw can be exploited by a remote attacker using a...

PT-2015-1797

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.10.5 Description The issue is caused by a race condition in the Install Framework Legacy component, specifically in the runner in Install.framework. This condition can be exploited by a remote attacker using a...

PT-2015-6302

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.10.4 Description The issue is related to the runner in Install.framework, which is part of the Install Framework Legacy subsystem. It does not properly drop privileges, allowing attackers to execute arbitrary co...

CVE-2015-3704: Undefined Security Weakness

runner in Install.framework in the Install Framework Legacy subsystem in Apple OS X before 10.10.4 does not properly drop privileges, which allows attackers to execute arbitrary code in a privileged context via a crafted app...

Apple MAC OS X Install.framework runner privilege dropping vulnerability

Apple Mac OS X is a commercial operating system. The Apple Mac OS X Install.framework 'runner' setuid program fails to properly discard privileges, allowing attackers to exploit the vulnerability to run malicious applications and execute arbitrary code...