CVE-2015-3708

kextd in kext tools in Apple OS X before 10.10.4 allows attackers to write to arbitrary files via a crafted app that conducts a symlink attack...

CVE-2015-3708

CVE-2015-3708 affects Apple OS X kextd/kext tools prior to 10.10.4. A crafted app performing a symlink attack can cause kextd to overwrite arbitrary files. Impact is arbitrary file write. Remediation mentioned in sources is upgrade to OS X 10.10.4 with Security Update 2015-005 (OS X Yosemite v10....