CVE-2015-5914

CVE-2015-5914 affects the EFI component in Apple OS X prior to 10.11. The issue enables physically proximate attackers to modify firmware during EFI updates by inserting an Apple Ethernet Thunderbolt adapter with crafted code in an Option ROM (Thunderstrike). Root cause is an incomplete fix for C...