#CURRENT VERSION OF MAC OS X UPDATE#

It wouldn't be surprising for the fix to find its way into an incremental update to OS X released in the coming weeks.

#CURRENT VERSION OF MAC OS X FREE#

Importantly, the current beta version of 10.11 is free of the flaw, an indication that Apple developers may already be aware of the vulnerability. This can be easily exploited for privilege escalation.'Р”В®sser said the vulnerability is present in both the current 10.10.4 (Yosemite) version of OS X and the current beta version of 10.10.5. 'And because the log file is never closed by dyld and the file is not opened with the close on exec flag the opened file descriptor is inherited by child processes of SUID binaries. 'This is obviously a problem, because it allows the creation or opening (for writing) of any file in the filesystem,' Esser wrote. Developers didn't use standard safeguards involving additions to the OS X dynamic linker dyld, a failure that allows attackers to open or create files with root privileges that can reside anywhere in the OS X file system.

When combined with a zero-day exploit targeting Adobe's Flash media player, Hacking Team was able to pierce security protections built into Google Chrome, widely regarded as the Internet's most secure browser by default.Р”Р„ccording to Esser, the OS X privilege-escalation flaw stems from new error-logging features that Apple added to OS X 10.10. Hacking Team, the Italian malware-as-a-service provider that catered to governments around the world, recently exploited similar elevation-of-privileges bugs in Microsoft Windows. Further Reading Hacking TeamРІР‚в„ўs Flash 0-day: Potent enough to infect actual Chrome userThe privilege-escalation bug, which was reported in a blog post published Tuesday by security researcher Stefan Esser, is the type of security hole attackers regularly exploit to bypass security protections built into modern operating systems and applications.

Current version of mac os x