Apple MacOS X Gatekeeper Protection Security Bypass Vulnerability

Bugtraq ID:	108894
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	May 24 2019 12:00AM
Updated:	May 24 2019 12:00AM
Credit:	Filippo Cavallarin
Vulnerable:	Cosmicperl Directory Pro 10.0.3 Apple Mac Os X 10.12.2 Apple Mac Os X 10.12.1 Apple Mac Os X 10.11.6 Apple Mac Os X 10.11.3 Apple Mac Os X 10.11.2 Apple Mac Os X 10.11.1 Apple Mac Os X 10.10.5 Apple Mac OS X 10.10 Apple Mac OS X 10.4.5 Apple Mac OS X 10.4.4 Apple Mac OS X 10.4.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 Apple Mac OS X 10.3.9 Apple Mac OS X 10.3.8 Apple Mac OS X 10.3.7 Apple Mac OS X 10.3.6 Apple Mac OS X 10.3.5 Apple Mac OS X 10.3.4 Apple Mac OS X 10.3.3 Apple Mac OS X 10.3.2 Apple Mac OS X 10.3.1 Apple Mac OS X 10.3 Apple Mac OS X 10.2.8 Apple Mac OS X 10.2.7 Apple Mac OS X 10.2.6 Apple Mac OS X 10.2.5 Apple Mac OS X 10.2.4 Apple Mac OS X 10.2.3 Apple Mac OS X 10.2.2 Apple Mac OS X 10.2.1 Apple Mac OS X 10.2 Apple Mac OS X 10.1.5 Apple Mac OS X 10.1.4 Apple Mac OS X 10.1.3 Apple Mac OS X 10.1.2 Apple Mac OS X 10.1.1 Apple Mac OS X 10.1 Apple Mac OS X 10.0.4 Apple Mac OS X 10.0.2 Apple Mac OS X 10.0.1 Apple Mac OS X 10.0 Apple Mac Os X 10.12.3 Apple Mac Os X 10.11.5 Apple Mac Os X 10.11.4 Apple Mac Os X 10.11 Apple Mac Os X 10.10.4 Apple Mac Os X 10.10.3 Apple Mac OS X 10.10.2 Apple Mac OS X 10.10.1 Apple Mac OS X 10.10
Not Vulnerable:

Apple MacOS X Gatekeeper Protection Security Bypass Vulnerability

Apple MacOS X is prone to a security-bypass vulnerability.

Attackers can exploit this issue to bypass certain security restrictions and to execute arbitrary code in the context of the user running the affected application.

Apple MacOS X 10.4.5 and prior versions are vulnerable.

Apple MacOS X Gatekeeper Protection Security Bypass Vulnerability

The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.

Apple MacOS X Gatekeeper Protection Security Bypass Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apple MacOS X Gatekeeper Protection Security Bypass Vulnerability

References:

• Apple Home Page (Apple)
  
• Mac OS X Homepage (Apple)
  
• MacOS X GateKeeper Bypass (fcvl.net)
  
• New Mac malware abuses recently disclosed Gatekeeper zero-day (zdnet.com)