CVE-2015-3773

Vulnerability

The SMB client in Apple OS X is affected by a memory corruption vulnerability. The issue exists in versions prior to OS X Yosemite v10.10.5 and Security Update 2015-006. The vulnerability is triggered via unspecified vectors, as described in the official advisory [1].

Exploitation

An attacker can exploit this vulnerability remotely by sending crafted SMB traffic to the target system. No authentication is required, and the attack does not require user interaction beyond the system being reachable over the network. The exact sequence of steps is not disclosed, but the vector involves memory corruption in the SMB client.

Impact

Successful exploitation allows an attacker to execute arbitrary code with the privileges of the SMB client process, or cause a denial of service through application crash. This can lead to full system compromise if the attacker gains elevated privileges.

Mitigation

Apple addressed this vulnerability in OS X Yosemite v10.10.5 and Security Update 2015-006, released on August 13, 2015 [1]. Users should update to the latest version. No workarounds are available for unpatched systems.