EUVD-2017-11606

Malware in sbrugna...

The vulnerability of the iOS operating system and the Mac OS X operating system allows attackers to circumvent existing access restrictions.

The vulnerability of the Security component in the iOS operating system and the Mac OS X operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to circumvent existing access restrictions by successfully calling the SecKeyRawVerify API...

CVE-2017-2423

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. The issue involves the "Security" component. It allows remote attackers to bypass intended access restrictions by leveraging a successful result from a SecKeyRawVerify API call with a...

Design/Logic Flaw

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. The issue involves the "Security" component. It allows remote attackers to bypass intended access restrictions by leveraging a successful result from a SecKeyRawVerify API call with a...

CVE-2017-2423

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. The issue involves the "Security" component. It allows remote attackers to bypass intended access restrictions by leveraging a successful result from a SecKeyRawVerify API call with a...

CVE-2017-2423

CVE-2017-2423 affects Apple iOS < 10.3 and macOS

CVE-2017-2423: Improper Verification of Cryptographic Signature

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. The issue involves the "Security" component. It allows remote attackers to bypass intended access restrictions by leveraging a successful result from a SecKeyRawVerify API call with a...

PT-2017-1770

Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.3 macOS versions prior to 10.12.4 Description The issue involves the "Security" component and allows remote attackers to bypass intended access restrictions. This is achieved by leveraging a successful result from a...