KLA11123 PE vulnerability in Xamarin.iOS

A serious vulnerability in the Xamarin.iOS can be exploited locally to gain privileges.

Technical details

To exploit this vulnerability, an attacker would have to log on to an affected system and create a folder at a particular location. which could be used by another process running with elevated privileges.

Only systems running macOS are affected by this vulnerability.

Original advisories

CVE-2017-8665

Exploitation

Public exploits exist for this vulnerability.

Related products

Xamarin

CVE list

CVE-2017-8665 high

KB list

4037359

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

• PE

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

• XSS/CSS

Cross site scripting. Exploitation of vulnerabilities with this impact can lead to partial interception of information transmitted between user and site.

Affected Products

• Xamarin.iOS