medium5.0Public exploit code
CVE-2014-8826
LaunchServices in Apple OS X before 10.10.2 does not properly handle file-type metadata, which allows attackers to bypass the Gatekeeper protection mechanism v…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Apple Mac OSX < 10.10.x - GateKeeper Bypass2015-01-29 · local · osx
Impact
LaunchServices in Apple OS X before 10.10.2 does not properly handle file-type metadata, which allows attackers to bypass the Gatekeeper protection mechanism via a crafted JAR archive.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Mac Os X | through 10.10.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html
- http://packetstormsecurity.com/files/130147/OS-X-Gatekeeper-Bypass.html
- http://seclists.org/fulldisclosure/2015/Jan/109
- http://support.apple.com/HT204244
- http://www.exploit-db.com/exploits/35934
- http://www.osvdb.org/117659
- http://www.securityfocus.com/archive/1/534567/100/0/threaded
- http://www.securityfocus.com/bid/72341
- http://www.securitytracker.com/id/1031650
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100519
- https://www.ampliasecurity.com/advisories/os-x-gatekeeper-bypass-vulnerability.html
- http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html
- http://packetstormsecurity.com/files/130147/OS-X-Gatekeeper-Bypass.html
- http://seclists.org/fulldisclosure/2015/Jan/109
- http://support.apple.com/HT204244
- http://www.exploit-db.com/exploits/35934
- http://www.osvdb.org/117659
- http://www.securityfocus.com/archive/1/534567/100/0/threaded
- http://www.securityfocus.com/bid/72341
- http://www.securitytracker.com/id/1031650
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100519
- https://www.ampliasecurity.com/advisories/os-x-gatekeeper-bypass-vulnerability.html