CVE-2015-3695

Vulnerability

A buffer overflow vulnerability exists in the Intel Graphics Driver component of Apple OS X versions prior to 10.10.4. The flaw can be triggered via unspecified vectors, allowing a local attacker to corrupt memory. This issue is distinct from several other related CVEs (CVE-2015-3696 through CVE-2015-3702) also addressed in the same update [1].

Exploitation

Exploitation requires local access to the system. An attacker must execute a crafted application that triggers the buffer overflow in the Intel Graphics Driver. No additional authentication beyond standard user privileges is needed, as the driver operates in kernel space and can be reached from user mode [1].

Impact

Successful exploitation allows a local user to gain elevated privileges, potentially leading to full system compromise. The attacker can execute arbitrary code with kernel-level permissions, bypassing security restrictions [1].

Mitigation

Apple addressed this vulnerability in OS X Yosemite v10.10.4 and Security Update 2015-005, released on June 30, 2015. Users should update to the latest version of OS X. No workarounds are documented; the only mitigation is applying the patch [1].