PT-2016-2060

CVE-2016-1805

·

Published

2016-05-20

·

Updated

2016-12-01

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions OS X versions prior to 10.11.5
Description The issue is related to insufficient access control in the CoreStorage component of the Mac OS X operating system. This allows an attacker to execute arbitrary code in a privileged context via a crafted app.
Recommendations For OS X versions prior to 10.11.5, update to version 10.11.5 or later to resolve the issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-284: Improper Access Control
Related identifiers
CVE-2016-1805
BDU:2016-01411
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com