CVE-2015-5784

creationtimestamp| type| source ---|---|--- 2015-09-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38137...

CVE-2015-5784

CVE-2015-5784 affects Apple OS X Install.framework’s setuid-root runner binary. The vulnerability arises in the IFInstallRunner’s Distributed Objects interface, where a proxy object can be passed as the pathArg to makeReceiptDirAt:asRoot:. The code previously called stringByAppendingPathComponent...