IOFireWireFamily-overflow

IOFireWireFamily-overflow IOFireWireFamily-overflow 是 CVE-2016-7608 的概念验证漏洞利用程序，该漏洞是 IOFireWireUserClient 中的一个缓冲区溢出漏洞，已在 macOS Sierra 10.12.2 中修复。此漏洞可被触发，导致拒绝服务，或可能在使用 FireWire 端口的设备上执行任意代码。 CVE-2016-7608 AppleFWOHCI::updateROM 方法在通过 AppleFWOHCIIOMemoryBlock32::create 分配的固定大小内存区域中 bcopy 其内容之前，未检查...

CVE-2016-7608

CVE-2016-7608 affects IOFireWireFamily in macOS Sierra (10.12.x) and earlier, enabling a local attacker to read kernel memory via an unspecified vector; described as a memory‑corruption/read kernel memory issue. Apple’s security content links this to the macOS 10.12.2 release (security update) wh...