CVE-2015-3802
HighSummary
In Apple iOS before 8.4.1 and OS X before 10.10.5, local users can bypass a code-signing protection mechanism via a crafted Mach-O file.
Risk Assessment
Bypassing the code-signing protection may allow the execution of malicious software, posing a serious threat to system and user data security.
Recommendation
It is recommended to update systems to the latest versions to mitigate this vulnerability.
Other vulnerabilities in Apple iOS, OS X
See all- CVE-2015-6983High
A double free vulnerability in Apple iOS before 9.1 and OS X before 10.11.1 allows attackers to write to arbitrary files via a crafted app that accesses AtomicBufferedFile descriptors.
- CVE-2015-3806High
Apple iOS versions before 8.4.1 and OS X versions before 10.10.5 allow local users to bypass a code-signing protection mechanism by appending code to a crafted executable file.
- CVE-2015-3805High
In Apple iOS before 8.4.1 and OS X before 10.10.5, local users can bypass a code-signing protection mechanism via a crafted Mach-O file.
- CVE-2015-3803High
Apple iOS versions before 8.4.1 and OS X versions before 10.10.5 allow local users to bypass a code-signing protection mechanism via a crafted multi-architecture executable file.
Original NVD description (English source)
Apple iOS before 8.4.1 and OS X before 10.10.5 allow local users to bypass a code-signing protection mechanism via a crafted Mach-O file, a different vulnerability than CVE-2015-3805.