Unscored CVE-2015-1146 EUVD-2015-1289GHSA-g8h9-3w8p-m257

The Code Signing implementation in Apple OS X before 10.10.3 does not properly validate signatures, which allows local users to bypass inte…

Published Apr 10, 2015 · Updated Aug 6, 2024 · Assigned by apple

Description

The Code Signing implementation in Apple OS X before 10.10.3 does not properly validate signatures, which allows local users to bypass intended access restrictions via a crafted bundle, a different vulnerability than CVE-2015-1145.

References

https://support.apple.com/HT204659
73982 vdb-entry
1032048 vdb-entry
APPLE-SA-2015-04-08-2 vendor-advisory