PT-2015-6307
CVE-2015-3709
·
Published
2015-07-03
·
Updated
2017-09-22
Description by
CVSS 2.0
6.9
MediumMetricsAV:L/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Apple OS X versions prior to 10.10.4
Description
A race condition in kext tools allows local users to bypass intended signature requirements for kernel extensions by leveraging improper pathname validation.
Recommendations
For Apple OS X versions prior to 10.10.4, update to version 10.10.4 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾