Description
SpotlightIndex in Apple OS X before 10.10.2 does not properly perform deserialization during access to a permission cache, which allows local users to read search results associated with other users' protected files via a Spotlight query.
References
- macosx-cve20148833-info-disc(100529) vdb-entry
- 1031650 vdb-entry
- http://support.apple.com/HT204244
- APPLE-SA-2015-01-27-4 vendor-advisory