CVE-2018-10406

CVE-2018-10406 — Yelp OSXCollector : Affected product is Yelp OSXCollector. The vulnerability describes that a maliciously crafted Universal/fat binary can bypass third-party code signing checks by not completing full inspection of the multi-architecture binary, causing the tool to report that th...

CVE-2018-10406

An issue was discovered in Yelp OSXCollector. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicious...

CVE-2018-10403

CVE-2018-10403 affects F-Secure XFENCE and Little Flocker, describing a vulnerability where a maliciously crafted Universal/Fat binary can bypass third-party code-signing checks, causing unsigned code to execute while appearing signed by Apple. Root cause: improper handling of multi-architecture ...

CVE-2018-10407

CVE-2018-10407 affects Carbon Black Cb Response. A maliciously crafted Universal/Fat binary can bypass third‑party code signing checks, causing the unsigned payload to execute while the signed Apple image is treated as legitimate. Exploitation relies on embedding unsigned Mach‑O binaries inside a...

CVE-2018-10407

An issue was discovered in Carbon Black Cb Response. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicio...

CVE-2018-10408

CVE-2018-10408 concerns VirusTotal and other macOS third‑party tools where a maliciously crafted Universal/Fat binary can bypass code-signing checks and cause unsigned malware to execute. The root cause is an inconsistency in how Mach‑O files are verified within Fat/Universal binaries: if the Fat...

CVE-2018-10408

An issue was discovered in VirusTotal. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicious unsigned co...

Google Santa Code Signing Bypass (macOS)

The installed version of Google Santa is less than 0.9.25 and is therefore vulnerable to allowing execution of malicious binaries due to accepting forged Apple signatures. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid110519; scriptversion"1.6";...

PT-2018-9869

Name of the Vulnerable Software and Affected Versions: Google Santa and molcodesignchecker affected versions not specified Description: An issue allows a maliciously crafted Universal/fat binary to evade third-party code signing checks. This occurs because the tool does not complete a full...

PT-2018-9871

Name of the Vulnerable Software and Affected Versions: Carbon Black Cb Response affected versions not specified Description: A maliciously crafted Universal/fat binary can evade third-party code signing checks. This occurs because the third-party tool does not complete a full inspection of the...

CVE-2018-10408: Improper Certificate Validation

An issue was discovered in VirusTotal. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicious unsigned co...

CVE-2018-10407: Improper Verification of Cryptographic Signature

An issue was discovered in Carbon Black Cb Response. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicio...

CVE-2018-10406: Improper Certificate Validation

An issue was discovered in Yelp OSXCollector. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicious...

CVE-2018-10405: Improper Certificate Validation

An issue was discovered in Google Santa and molcodesignchecker. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but...

CVE-2018-10403: Improper Certificate Validation

An issue was discovered in F-Secure XFENCE and Little Flocker. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but t...

PT-2018-9872

Name of the Vulnerable Software and Affected Versions: VirusTotal affected versions not specified Description: An issue was discovered where a maliciously crafted Universal/fat binary can evade third-party code signing checks. This occurs because the third-party tool does not complete a full...

PT-2018-9867

Name of the Vulnerable Software and Affected Versions: F-Secure XFENCE and Little Flocker affected versions not specified Description: A maliciously crafted Universal/fat binary can evade third-party code signing checks. This occurs because the tool does not complete a full inspection of the...

UBUNTU-CVE-2018-0495

Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the gcryeccecdsasign function in cipher/ecc-ecdsa.c, aka the Return Of the Hidden Number Problem or ROHNP. T...

Bypass Glitch Allows Malware to Masquerade as Legit Apple Files

Masquerading as an official Apple system file sounds like a wonderful way for malware to worm its way onto Macs – and a recently discovered code-signing bypass flaw allows bad code to do just that. The way some developers have implemented Apple’s official code-signing API can be exploited by...

Signature Validation Bug Let Malware Bypass Several Mac Security Products

A years-old vulnerability has been discovered in the way several security products for Mac implement Apple's code-signing API that could make it easier for malicious programs to bypass the security check, potentially leaving millions of Apple users vulnerable to hackers. Josh Pitts, a researcher...