CVE-2015-3704

creationtimestamp| type| source ---|---|--- 2015-09-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38138...

CVE-2015-3704

CVE-2015-3704 affects Apple OS X (before 10.10.4) in the Install Framework Legacy subsystem. The setuid root binary runner in Install.framework/Resources did not drop privileges properly, enabling a crafted app to execute arbitrary code with system privileges. Public references describe the vulne...

CVE-2015-3704

runner in Install.framework in the Install Framework Legacy subsystem in Apple OS X before 10.10.4 does not properly drop privileges, which allows attackers to execute arbitrary code in a privileged context via a crafted app...