← back
CVE-2015-5754

CVE-2015-5754

EPSS 7.4%
Race condition in runner in Install.framework in the Install Framework Legacy component in Apple OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages incorrect privilege dropping associated with a locking error.
Affected products
n/a · n/a
public PoCs found — 3
cve_referencepacketstormsecurity.com/files/133550/OS-X-Suid-Privilege-Escalation.htmlunverifiedcve_referencewww.exploit-db.com/exploits/38136/unverifiedexploitdbwww.exploit-db.com/exploits/38136unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.htmlhttp://packetstormsecurity.com/files/133550/OS-X-Suid-Privilege-Escalation.htmlhttps://support.apple.com/kb/HT205031https://www.exploit-db.com/exploits/38136/http://www.securityfocus.com/bid/76340http://www.securitytracker.com/id/1033276