PT-2015-6302

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.10.4 Description The issue is related to the runner in Install.framework, which is part of the Install Framework Legacy subsystem. It does not properly drop privileges, allowing attackers to execute arbitrary co...

CVE-2015-3704: Undefined Security Weakness

runner in Install.framework in the Install Framework Legacy subsystem in Apple OS X before 10.10.4 does not properly drop privileges, which allows attackers to execute arbitrary code in a privileged context via a crafted app...