Unscored CVE-2015-3715 EUVD-2015-3751GHSA-w422-2239-9wfc

The code-signing implementation in Apple OS X before 10.10.4 does not properly consider libraries that are external to an application bundl…

Published Jul 3, 2015 · Updated Aug 6, 2024 · Assigned by apple

Description

The code-signing implementation in Apple OS X before 10.10.4 does not properly consider libraries that are external to an application bundle, which allows attackers to bypass intended launch restrictions via a crafted library.

References

APPLE-SA-2015-06-30-2 vendor-advisory
75493 vdb-entry
1032760 vdb-entry
http://support.apple.com/kb/HT204942