CVE:CVE-2018-10404
CNNVD:CNNVD-201806-825
Universal/fat binary是一个二进制文件。
Universal/fat binary 中存在信任管理问题漏洞。攻击者可借助恶意制作的多架构程序（Universal/fat binary）利用该漏洞绕过第三方代码签名检测，执行未签名的恶意代码。以下产品受到影响：Objective-See KnockKnock；LuLu；TaskExplorer；WhatsYourSign；procInfo。
solution:Upgrade objective-see knockknock to a higher version than 1.9.3,and avoid the version (,1.9.3]; Upgrade objective-see lulu to a higher version than 0.9.8,and avoid the version (,0.9.8]; Upgrade objective-see procinfo to a higher version than -; Upgrade objective-see taskexplorer to a higher version than 1.6.0,and avoid the version (,1.6.0]; Upgrade objective-see whatsyoursign to a higher version than 1.4.0,and avoid the version (,1.4.0]