Design/Logic Flaw

Apple iOS before 8.4.1 and OS X before 10.10.5 allow local users to bypass a code-signing protection mechanism via a crafted multi-architecture executable file...

Design/Logic Flaw

Apple iOS before 8.4.1 and OS X before 10.10.5 allow local users to bypass a code-signing protection mechanism by appending code to a crafted executable file...

Design/Logic Flaw

Apple iOS before 8.4.1 and OS X before 10.10.5 allow local users to bypass a code-signing protection mechanism via a crafted Mach-O file, a different vulnerability than CVE-2015-3805...

APPLE-SA-2015-08-13-3 iOS 8.4.1

APPLE-SA-2015-08-13-3 iOS 8.4.1 iOS 8.4.1 is now available and addresses the following: AppleFileConduit Available for: iPhone 4s and later, iPod touch 5th generation and later, iPad 2 and later Impact: A maliciously crafted afc command may allow access to protected parts of the filesystem...

Design/Logic Flaw

Apple iOS before 8.4.1 and OS X before 10.10.5 allow local users to bypass a code-signing protection mechanism via a crafted Mach-O file, a different vulnerability than CVE-2015-3802...

CVE-2015-3802

CVE-2015-3802 affects Apple iOS before 8.4.1 and OS X before 10.10.5, where a crafted Mach-O file could bypass the code-signing protection mechanism. The vulnerability is local (no user interaction required per CVSS data) and historically part of Apple’s TV/Apple ecosystem bundle of fixes. The co...

CVE-2015-3806

Apple iOS before 8.4.1 and OS X before 10.10.5 allow local users to bypass a code-signing protection mechanism by appending code to a crafted executable file...

CVE-2015-3805

CVE-2015-3805 is a local code-signing bypass in Apple products where a crafted Mach‑O file could allow unsigned code execution. The initial description cites iOS < 8.4.1 and OS X

CVE-2015-3805

Apple iOS before 8.4.1 and OS X before 10.10.5 allow local users to bypass a code-signing protection mechanism via a crafted Mach-O file, a different vulnerability than CVE-2015-3802...

CVE-2015-3802

Apple iOS before 8.4.1 and OS X before 10.10.5 allow local users to bypass a code-signing protection mechanism via a crafted Mach-O file, a different vulnerability than CVE-2015-3805...

CVE-2015-3803

The CVE-2015-3803 entry concerns Apple iOS pre-8.4.1 and OS X pre-10.10.5, where a local user could bypass code-signing protections via a crafted multi-architecture Mach-O executable. The root cause is a validation issue in how Mach-O files were handled, allowing unsigned or improperly signed cod...

CVE-2015-3803

Apple iOS before 8.4.1 and OS X before 10.10.5 allow local users to bypass a code-signing protection mechanism via a crafted multi-architecture executable file...

CVE-2015-3806

CVE-2015-3806 affects Apple iOS before 8.4.1 and OS X before 10.10.5. It describes a code-signing bypass where unsigned or tampered code could be appended to a crafted executable, enabling bypass of protection and potentially executing code. The Apple security content indicates this was addressed...

Apple iOS < 8.4.1 Multiple Vulnerabilities

Binary data appleios841check.nbin...

CVE-2015-3715

The code-signing implementation in Apple OS X before 10.10.4 does not properly consider libraries that are external to an application bundle, which allows attackers to bypass intended launch restrictions via a crafted library...

Code injection

The code-signing implementation in Apple OS X before 10.10.4 does not properly consider libraries that are external to an application bundle, which allows attackers to bypass intended launch restrictions via a crafted library...

CVE-2015-3715

The CVE-2015-3715 entry describes a code-signing bypass in Apple OS X before 10.10.4, where libraries loaded outside an application bundle are not properly vetted, allowing bypass of launch restrictions. Affected product: macOS OS X prior to 10.10.4. Root cause: code-signing checks do not verify ...

CVE-2015-3715

The code-signing implementation in Apple OS X before 10.10.4 does not properly consider libraries that are external to an application bundle, which allows attackers to bypass intended launch restrictions via a crafted library...

Apple MAC OS X Code Signing Check Bypass Vulnerability

Apple Mac OS X is a commercial operating system. Apple Mac OS X code signing fails to verify libraries loaded outside of the application bundle, allowing attackers to exploit vulnerabilities to run malicious applications and bypass code signing...

Bypassing OSX Security Tools is Trivial, Researcher Says

SAN FRANCISCO–For years, Apple has enjoyed a pretty good reputation among users for the security of its products. That halo has been enhanced by the addition of new security features such as Gatekeeper and XProtect to OS X recently, but one researcher said that all of those protections are simple...