CVE-2015-3802: Input Validation
Published Aug 16, 2015
·Updated
Apple iOS before 8.4.1 and OS X before 10.10.5 allow local users to bypass a code-signing protection mechanism via a crafted Mach-O file, a different vulnerability than CVE-2015-3805.
Affected Software
2 affected components
Apple iPhone OS<=8.4
Apple iOS and macOS<=10.10.4
Event History
Aug 16, 2015
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-3802?
CVE-2015-3802 has been classified as a medium severity vulnerability due to its potential to allow local users to bypass code-signing protections.
2
How do I fix CVE-2015-3802?
To fix CVE-2015-3802, update your Apple device to iOS 8.4.1 or OS X 10.10.5 or later.
3
Who is affected by CVE-2015-3802?
CVE-2015-3802 affects users of iOS versions prior to 8.4.1 and OS X versions prior to 10.10.5.
4
What types of files are involved in CVE-2015-3802?
CVE-2015-3802 involves crafted Mach-O files that exploit the vulnerability.
5
Is CVE-2015-3802 a remote or local vulnerability?
CVE-2015-3802 is a local vulnerability, requiring physical access to the affected device.