CVE-2015-3803
HighSummary
Apple iOS versions before 8.4.1 and OS X versions before 10.10.5 allow local users to bypass a code-signing protection mechanism via a crafted multi-architecture executable file.
Risk Assessment
Bypassing the code-signing protection may lead to the execution of malicious software, posing a threat to system and user data security.
Recommendation
It is recommended to update systems to the latest versions to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Apple iOS, OS X
See all- CVE-2015-6983High
A double free vulnerability in Apple iOS before 9.1 and OS X before 10.11.1 allows attackers to write to arbitrary files via a crafted app that accesses AtomicBufferedFile descriptors.
- CVE-2015-3806High
Apple iOS versions before 8.4.1 and OS X versions before 10.10.5 allow local users to bypass a code-signing protection mechanism by appending code to a crafted executable file.
- CVE-2015-3805High
In Apple iOS before 8.4.1 and OS X before 10.10.5, local users can bypass a code-signing protection mechanism via a crafted Mach-O file.
- CVE-2015-3802High
In Apple iOS before 8.4.1 and OS X before 10.10.5, local users can bypass a code-signing protection mechanism via a crafted Mach-O file.
Original NVD description (English source)
Apple iOS before 8.4.1 and OS X before 10.10.5 allow local users to bypass a code-signing protection mechanism via a crafted multi-architecture executable file.