Lucene search
GoogleOSV:PYSEC-2018-95HistoryJun 13, 2018 - 10:29 p.m.
PYSEC-2018-95
2018-06-1322:29:00
Google
osv.dev
6
0.001 Low
EPSS
Percentile
39.1%
An issue was discovered in Yelp OSXCollector. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicious unsigned code will execute.
| CPE | Name | Operator | Version |
|---|---|---|---|
| osxcollector | eq | 1.8 | |
| osxcollector | eq | 1.7 |
Related
prion
prion
Code injection
2018-06-13 22:29:00
veracode
veracode
Improper Certificate Validation
2024-04-30 06:49:21
github
github
Yelp OSXCollector Improper Certificate Validation
2022-05-13 01:48:47
osv
osv
Yelp OSXCollector Improper Certificate Validation
2022-05-13 01:48:47
CVE-2018-10406
2018-06-13 22:29:00
cve
cve
CVE-2018-10406
2018-06-13 22:29:00
nvd
nvd
CVE-2018-10406
2018-06-13 22:29:00
cvelist
cvelist
CVE-2018-10406
2018-06-13 22:00:00
myhack58
myhack58
threatpost
threatpost
Bypass Glitch Allows Malware to Masquerade as Legit Apple Files
2018-06-12 17:26:17
thn
thn
Signature Validation Bug Let Malware Bypass Several Mac Security Products
2018-06-12 14:43:00