Multiple unspecified vulnerabilities in Git before 2.5.4, as used in Apple Xcode before 7.2, have unknown impact and attack vectors. NOTE: this CVE is associated only with Xcode use cases.

An update of the git package has been released.

The version of Apple Xcode installed on the remote Mac OS X host is prior to 7.2. It is, therefore, affected by multiple vulnerabilities :

  - Multiple remote code execution vulnerabilities exist due to a flaw in the otools component that is     triggered when handling Mach-O files. A remote attacker can exploit these vulnerabilities to execute     arbitrary code. (CVE-2015-7049, CVE-2015-7057)

  - A flaw exists in the IDE SCM due to the .gitignore directive not being honored. An unauthenticated, remote     attacker can exploit this to disclose sensitive information. (CVE-2015-7056)

  - A remote code execution vulnerability exists due to a flaw in git-remote-ext that is triggered when     handling a specially crafted URL. An unauthenticated, remote attacker can exploit this to execute     arbitrary code. (CVE-2015-7082)

ID	Name	Product	Family	Type	Severity
333673	Photon OS 5.0: Git PHSA-2025-5.0-91-0590	Nessus	PhotonOS Local Security Checks	Local	low
252274	Photon OS 5.0: Git PHSA-2025-5.0-0590	Nessus	PhotonOS Local Security Checks	Local	critical
87737	Apple Xcode < 7.2 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	Local	critical

Detections

Analytics

CVE-2015-7082

critical

Tenable Plugins

low

critical

critical