Lucene search

K
zdiChristopher HicksteinZDI-14-368
HistoryOct 24, 2014 - 12:00 a.m.

Apple OS X GateKeeper Bypass Vulnerability

2014-10-2400:00:00
Christopher Hickstein
www.zerodayinitiative.com
16

EPSS

0.04

Percentile

92.1%

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within Gatekeeper. The issue lies in the usage of signed applications that do not sign the frameworks they depend on. An attacker can leverage this vulnerability to execute code under the context of the user.

EPSS

0.04

Percentile

92.1%