CVE-2015-1117
10.04.2015, 14:59
The (1) setreuid and (2) setregid system-call implementations in the kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 do not properly perform privilege drops, which makes it easier for attackers to execute code with unintended user or group privileges via a crafted app.Enginsight
| Vendor | Product | Version |
|---|---|---|
| apple | iphone_os | 𝑥 ≤ 8.2 |
| apple | tvos | 𝑥 ≤ 7.1 |
| apple | mac_os_x | 𝑥 ≤ 10.10.2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References