Lucene search
GoogleOSV:GHSA-G3CC-PVJJ-9XQ9HistoryMay 13, 2022 - 1:48 a.m.
Yelp OSXCollector Improper Certificate Validation
2022-05-1301:48:47
Google
osv.dev
5
An issue was discovered in Yelp OSXCollector. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicious unsigned code will execute.
| CPE | Name | Operator | Version |
|---|---|---|---|
| osxcollector | eq | 1.8 | |
| osxcollector | eq | 1.7 |
Related
prion
prion
Code injection
2018-06-13 22:29:00
veracode
veracode
Improper Certificate Validation
2024-04-30 06:49:21
cve
cve
CVE-2018-10406
2018-06-13 22:29:00
osv
osv
PYSEC-2018-95
2018-06-13 22:29:00
CVE-2018-10406
2018-06-13 22:29:00
github
github
Yelp OSXCollector Improper Certificate Validation
2022-05-13 01:48:47
nvd
nvd
CVE-2018-10406
2018-06-13 22:29:00
cvelist
cvelist
CVE-2018-10406
2018-06-13 22:00:00
myhack58
myhack58
threatpost
threatpost
Bypass Glitch Allows Malware to Masquerade as Legit Apple Files
2018-06-12 17:26:17
thn
thn
Signature Validation Bug Let Malware Bypass Several Mac Security Products
2018-06-12 14:43:00