CVE-2016-1738
HighSummary
A vulnerability in dyld in Apple OS X before 10.11.4 allows attackers to bypass a code-signing protection mechanism via a modified app.
Risk Assessment
Organizations may be exposed to running malicious software, potentially leading to data loss or system takeover.
Recommendation
It is recommended to update the system to version 10.11.4 or later to mitigate this vulnerability.
Other vulnerabilities in dyld
See all- CVE-2015-7079High
dyld in Apple iOS before 9.2 and tvOS before 9.1 mishandles segment validation, allowing attackers to execute arbitrary code in a privileged context via a crafted app.
- CVE-2015-7072High
A vulnerability in dyld in Apple iOS before 9.2, tvOS before 9.1, and watchOS before 2.1 mishandles segment validation, allowing attackers to execute arbitrary code in a privileged context.
- CVE-2015-3760High
dyld in Apple OS X before 10.10.5 does not properly validate pathnames in the environment, which allows local users to gain privileges via unspecified vectors.
Original NVD description (English source)
dyld in Apple OS X before 10.11.4 allows attackers to bypass a code-signing protection mechanism via a modified app.