CVE-2014-4391

The Code Signing feature in Apple OS X before 10.10 does not properly handle incomplete resource envelopes in signed bundles, which allows remote attackers to…

published October 18, 2014

CVSS
—
EPSS
3%
Percentile
86.7
In the wild
Unconfirmed
What it is

The Code Signing feature in Apple OS X before 10.10 does not properly handle incomplete resource envelopes in signed bundles, which allows remote attackers to bypass intended app-author restrictions by omitting an execution-related resource.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02871 · 86.7th percentile
Published
2014-10-18T01:00Z
EPSS history
Timeline
  • 18 OCT 01:00Z
    The Code Signing feature in Apple OS X before 10.10 does not properly handle incomplete resource envelopes in signed bundles, which allows remote attackers to…
    cvelistv5