CVE-2015-3698

Vulnerability

Buffer overflow in the Intel Graphics Driver component of Apple OS X before version 10.10.4 allows local users to gain privileges. The vulnerability exists in the graphics driver, and the affected versions are OS X Yosemite v10.10 to v10.10.3 and OS X Mavericks v10.9.5 (if applicable). The official description [1] indicates this is one of several similar vulnerabilities.

Exploitation

Exploitation requires local access to the system. The attacker must have the ability to execute code on the machine. The exact attack vector is not disclosed by Apple, but it involves triggering a buffer overflow in the Intel Graphics Driver. No user interaction beyond running a malicious program is needed.

Impact

Successful exploitation allows a local attacker to gain elevated privileges, potentially obtaining root or kernel-level access. This can lead to full control of the system, including the ability to install malware, modify system files, or exfiltrate data.

Mitigation

Apple released OS X Yosemite v10.10.4 which addresses this vulnerability. Users should update to the latest version. No workarounds are provided. The vulnerability is not listed on CISA's Known Exploited Vulnerabilities (KEV) catalog.