CVE-2015-3715 in Mac OS X
Summary
The code-signing implementation in Apple OS X before 10.10.4 does not properly consider libraries that are external to an application bundle, which allows attackers to bypass intended launch restrictions via a crafted library.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
05/07/2015
Disclosure
07/02/2015
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 76261 | Apple Mac OS X Code-Signing 7pk security | 254 | Not defined | Official fix | CVE-2015-3715 |