CVE-2018-10408: High severity virustotal vulnerability
An issue was discovered in VirusTotal. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicious unsigned code will execute.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-10408?
CVE-2018-10408 is classified as a moderate severity vulnerability due to its potential to allow execution of malicious code.
How does CVE-2018-10408 exploit third-party code signing checks?
CVE-2018-10408 exploits third-party code signing checks by allowing an unsigned Universal/fat binary to be misidentified as a legitimate Apple-signed binary.
What types of software are affected by CVE-2018-10408?
CVE-2018-10408 specifically affects the VirusTotal tool that analyzes code for potential threats.
How can users mitigate the risks associated with CVE-2018-10408?
Users can mitigate risks related to CVE-2018-10408 by ensuring that they only use trusted sources for binaries and keeping their VirusTotal software updated.
What actions should be taken if a malicious binary is detected due to CVE-2018-10408?
If a malicious binary is detected due to CVE-2018-10408, users should immediately remove the binary and scan their systems for further compromises.