CVE-2015-1140

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.10.3

Description The issue is related to a buffer overflow in the IOHIDFamily component of Apple OS X, allowing local users to gain privileges. Additionally, there are reports of a heap buffer overflow in the IOHIDSecurePromptClient and an untrusted pointer dereference, which can lead to arbitrary code execution.

Recommendations For versions prior to 10.10.3, update to version 10.10.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the IOHIDFamily component and the IOHIDSecurePromptClient until a patch is applied. Avoid using the affected IOHIDSecurePromptClient function in sensitive operations until the issue is resolved.