Vulnerability in File Type Detection of Cisco Advanced Malware Protection for macOS

CVE-2018-0237

Summary

The file type detection mechanism in Cisco's Advanced Malware Protection for Endpoints macOS Connector has a critical flaw that can be exploited by attackers. This vulnerability arises from the reliance on file extensions for detecting DMG files. An attacker could circumvent malware detection by sending a DMG file with an unusual extension to the affected device. This exploit allows unauthorized access to potentially harmful files, undermining the security measures intended to protect the system from malware threats.

References