mirror of
https://github.com/0xMarcio/cve.git
synced 2026-03-30 09:00:49 +02:00
750 B
750 B
CVE-2014-4391
Description
The Code Signing feature in Apple OS X before 10.10 does not properly handle incomplete resource envelopes in signed bundles, which allows remote attackers to bypass intended app-author restrictions by omitting an execution-related resource.
POC
Reference
No PoCs from references.