3 matches found
Design/Logic Flaw
The Code Signing feature in Apple OS X before 10.10 does not properly handle incomplete resource envelopes in signed bundles, which allows remote attackers to bypass intended app-author restrictions by omitting an execution-related resource...
PT-2014-5856
Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.10 Description The issue allows remote attackers to bypass intended app-author restrictions by omitting an execution-related resource in signed bundles, due to improper handling of incomplete resource envelopes ...
CVE-2014-4391: Undefined Security Weakness
The Code Signing feature in Apple OS X before 10.10 does not properly handle incomplete resource envelopes in signed bundles, which allows remote attackers to bypass intended app-author restrictions by omitting an execution-related resource...