← back
CVE-2014-8826

CVE-2014-8826

EPSS 8.7%
LaunchServices in Apple OS X before 10.10.2 does not properly handle file-type metadata, which allows attackers to bypass the Gatekeeper protection mechanism via a crafted JAR archive.
Affected products
n/a · n/a
public PoCs found — 3
cve_referencepacketstormsecurity.com/files/130147/OS-X-Gatekeeper-Bypass.htmlunverifiedcve_referencewww.exploit-db.com/exploits/35934unverifiedexploitdbwww.exploit-db.com/exploits/35934unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.htmlhttp://packetstormsecurity.com/files/130147/OS-X-Gatekeeper-Bypass.htmlhttp://seclists.org/fulldisclosure/2015/Jan/109https://exchange.xforce.ibmcloud.com/vulnerabilities/100519http://support.apple.com/HT204244https://www.ampliasecurity.com/advisories/os-x-gatekeeper-bypass-vulnerability.htmlhttp://www.exploit-db.com/exploits/35934http://www.osvdb.org/117659http://www.securityfocus.com/archive/1/534567/100/0/threadedhttp://www.securityfocus.com/bid/72341http://www.securitytracker.com/id/1031650