CVE-2015-3691 - The Monitor Control Command Set kernel extension in the Display Drivers subsystem in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages control of a function pointer

Back Back to CVE browser

HIGH

The Monitor Control Command Set kernel extension in the Display Drivers subsystem in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages control of a function pointer

Published Jul 3, 2015

9.3

HIGH

CVSS 2.0

EPSS 2.71%

Description

The Monitor Control Command Set kernel extension in the Display Drivers subsystem in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context via a crafted app that leverages control of a function pointer.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-284

References (4)

http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html
vendor-advisoryx_refsource_APPLEPatchVendor Advisory
http://support.apple.com/kb/HT204942
x_refsource_CONFIRMVendor Advisory
http://www.securityfocus.com/bid/75493
vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1032760
vdb-entryx_refsource_SECTRACK

Link	Providers	Tags
http://lists.apple.com/archives/security-announce/2015/Jun/msg00002.html		vendor-advisoryx_refsource_APPLEPatchVendor Advisory
http://support.apple.com/kb/HT204942		x_refsource_CONFIRMVendor Advisory
http://www.securityfocus.com/bid/75493		vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1032760		vdb-entryx_refsource_SECTRACK

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner apple

Published Jul 3, 2015

Updated Aug 6, 2024

Reserved May 7, 2015

Link CVE-2015-3691

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2015-3691

Red Hat

Severity n/a

Public date n/a

Links CVE-2015-3691