Apple · Os X · CVE-2015-3794
**Name of the Vulnerable Software and Affected Versions**
Apple OS X versions prior to 10.10.5
**Description**
The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption and application crash via a crafted Unicode string. This is caused by a buffer overflow in the Speech UI component.
**Recommendations**
For Apple OS X versions prior to 10.10.5, update to version 10.10.5 or later to resolve the issue. As a temporary workaround, consider disabling speech alerts until a patch is available.