Most recent entries from all

bdu:2016-00124

cnvd-2016-00214

fkie_cve-2015-7024

GHSA-q45w-gwrf-j3jq

gsd-2015-7024

VAR-201601-0070

Untrusted search path vulnerability in Apple OS X before 10.11.1 allows local users to bypass intended Gatekeeper restrictions and gain privileges via a Trojan horse program that is loaded from an unexpected directory by an application that has a valid Apple digital signature. Supplementary information : CWE Vulnerability type by CWE-426: Untrusted Search Path ( Unreliable search path ) Has been identified. Apple Mac OS X is prone to a security-bypass vulnerability. Attackers can exploit this issue to bypass certain security restrictions and to execute arbitrary code in the context of the user running the affected application. The vulnerability stems from the fact that applications using legal Apple digital signatures can load Trojan programs from specific locations. A local attacker can exploit this vulnerability to bypass established Gatekeeper restrictions and gain permissions