CVE-2015-3806
HighSummary
Apple iOS versions before 8.4.1 and OS X versions before 10.10.5 allow local users to bypass a code-signing protection mechanism by appending code to a crafted executable file.
Risk Assessment
Bypassing the code-signing protection may lead to the execution of malicious software, posing a serious threat to system security and user data.
Recommendation
It is recommended to update the systems to the latest versions to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Apple iOS, OS X
See all- CVE-2015-6983High
A double free vulnerability in Apple iOS before 9.1 and OS X before 10.11.1 allows attackers to write to arbitrary files via a crafted app that accesses AtomicBufferedFile descriptors.
- CVE-2015-3805High
In Apple iOS before 8.4.1 and OS X before 10.10.5, local users can bypass a code-signing protection mechanism via a crafted Mach-O file.
- CVE-2015-3803High
Apple iOS versions before 8.4.1 and OS X versions before 10.10.5 allow local users to bypass a code-signing protection mechanism via a crafted multi-architecture executable file.
- CVE-2015-3802High
In Apple iOS before 8.4.1 and OS X before 10.10.5, local users can bypass a code-signing protection mechanism via a crafted Mach-O file.
Original NVD description (English source)
Apple iOS before 8.4.1 and OS X before 10.10.5 allow local users to bypass a code-signing protection mechanism by appending code to a crafted executable file.