First published: Sun Aug 16 2015(Updated: )
Multiple buffer overflows in blued in the Bluetooth subsystem in Apple OS X before 10.10.5 allow local users to gain privileges via XPC messages.
Credit: product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
macOS Yosemite | <=10.10.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-3777 is considered a critical vulnerability due to its potential for privilege escalation.
To address CVE-2015-3777, users should upgrade to Apple's OS X 10.10.5 or later.
CVE-2015-3777 affects local users on Apple OS X versions prior to 10.10.5.
CVE-2015-3777 involves multiple buffer overflow vulnerabilities in the Bluetooth subsystem.
An attacker could exploit CVE-2015-3777 to gain elevated privileges on the affected system.