Security bypass vulnerability in CPU Software in Apple OS X via crafted code in an Option ROM| ID: oval:org.secpod.oval:def:23402 | Date: (C)2015-02-06 (M)2023-12-07 |
| Class: VULNERABILITY | Family: macos |
The host is installed with Apple Mac OS X or Server 10.10 before 10.10.2 and is prone to a security bypass vulnerability. A flaw is present in the application, which fails to properly handle crafted code in an Option ROM. Successful exploitation allows attackers to modify firmware during the EFI update process by inserting a Thunderbolt device.
| Platform: |
| Apple Mac OS X 10.10 |
| Apple Mac OS X Server 10.10 |
