CVE-2014-8826

Apple OS X <10.10.2 - Info Disclosure

Title source: llm
STIX 2.1

Description

LaunchServices in Apple OS X before 10.10.2 does not properly handle file-type metadata, which allows attackers to bypass the Gatekeeper protection mechanism via a crafted JAR archive.

Exploits (1)

exploitdb WORKING POC
by Amplia Security Research · textlocalosx
https://www.exploit-db.com/exploits/35934

References (11)

Core 11
Core References
Exploit vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1031650
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/534567/100/0/threaded
Vendor Advisory x_refsource_confirm
http://support.apple.com/HT204244
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/72341
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/100519
Vendor Advisory vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html
Mailing List mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2015/Jan/109
Exploit, Third Party Advisory exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/35934
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/117659

Scores

EPSS 0.1397
EPSS Percentile 94.4%

Details

CWE
CWE-19
Status published
Products (1)
apple/mac_os_x < 10.10.1
Published Jan 30, 2015
Tracked Since Feb 18, 2026