Lucene search
HistoryApr 10, 2015 - 2:59 p.m.
CVE-2015-1145
apple
os x
code signing
validation
access restrictions
security
vulnerability
cve-2015-1145
5.8 Medium
AI Score
Confidence
Low
1.9 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:M/Au:N/C:N/I:P/A:N
0.0004 Low
EPSS
Percentile
5.2%
The Code Signing implementation in Apple OS X before 10.10.3 does not properly validate signatures, which allows local users to bypass intended access restrictions via a crafted bundle, a different vulnerability than CVE-2015-1146.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apple:mac_os_x | apple mac os x | lt | 10.10.3 |
Related
cvelist
cvelist
CVE-2015-1145
2015-04-10 14:00:00
CVE-2015-1146
2015-04-10 14:00:00
prion
prion
Code injection
2015-04-10 14:59:00
Code injection
2015-04-10 14:59:00
cve
cve
CVE-2015-1146
2015-04-10 14:59:00
kaspersky
kaspersky
KLA10540 Multiple vulnerability in Apple OS X
2015-04-10 00:00:00
openvas
openvas
Apple Mac OS X Multiple Vulnerabilities-01 (Apr 2015)
2015-04-24 00:00:00
nessus
nessus
Mac OS X Multiple Vulnerabilities (Security Update 2015-004) (FREAK)
2015-04-10 00:00:00
Mac OS X 10.10.x < 10.10.3 Multiple Vulnerabilities (FREAK)
2015-04-10 00:00:00
securityvulns
securityvulns
APPLE-SA-2015-04-08-2 OS X 10.10.3 and Security Update 2015-004
2015-04-09 00:00:00
Apple Mac OS X multiple security vulnerabilities
2015-04-13 00:00:00
5.8 Medium
AI Score
Confidence
Low
1.9 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:M/Au:N/C:N/I:P/A:N
0.0004 Low
EPSS
Percentile
5.2%
Related for CVE-2015-1145