78 matches found
Remote code execution
Sketch before 75 allows library feeds to be used to bypass file quarantine. Files are automatically downloaded and opened, without the com.apple.quarantine extended attribute. This results in remote code execution, as demonstrated by CommandString in a terminal profile to Terminal.app...
CVE-2021-40531
CVE-2021-40531 affects Sketch (macOS). The vulnerability arises when Sketch 75 or earlier allows library feeds to bypass the com.apple.quarantine attribute, causing files to be downloaded and opened automatically. This quarantine bypass can lead to remote code execution, as demonstrated by embedd...
CVE-2021-40531
Sketch before 75 allows library feeds to be used to bypass file quarantine. Files are automatically downloaded and opened, without the com.apple.quarantine extended attribute. This results in remote code execution, as demonstrated by CommandString in a terminal profile to Terminal.app...
PT-2021-22925
Name of the Vulnerable Software and Affected Versions Sketch versions prior to 75 Description The issue allows library feeds to be used to bypass file quarantine, resulting in remote code execution. This can be achieved by using a CommandString in a terminal profile to Terminal.app, allowing file...
CVE-2021-40531: Unrestricted Upload of File with Dangerous Type
Sketch before 75 allows library feeds to be used to bypass file quarantine. Files are automatically downloaded and opened, without the com.apple.quarantine extended attribute. This results in remote code execution, as demonstrated by CommandString in a terminal profile to Terminal.app...
Apple Patches Zero-Day MacOS Bypass Bug
Apple patched a zero-day vulnerability in its MacOS that can bypass critical anti-malware capabilities and which a variant of the notorious Mac threat Shlayer adware dropper already has been exploiting for several months. Security researcher Cedric Owens first discovered the vulnerability, tracke...
Internet Bug Bounty: Uncovering file quarantine and UX security issues in macOS apps ( .terminal, .fileloc and .url)
Slides : https://docs.google.com/presentation/d/19WeQbqcOKnrSv1I3Z4sm-oNAf6IVzHwRyQP4i9BvY/editslide=id.g758ad3e04223231 See Blogpost for more details - https://medium.com/@metnew/exploiting-popular-macos-apps-with-a-single-terminal-file-f6c2efdfedaa Summary Popular macOS apps with a file-sharing...
Acronis: Local Privilege Escalation in anti_ransomware_service.exe via quarantine
antiransomwareservice.exe includes a functionality to quarantine files which will copy the suspected ransomware file from one directory to another using SYSTEM privileges. As any unprivileged user has write permissions in the quarantine folder, it is possible to control this privileged write with...
Apple macOS Catalina File Quarantine Component Elevation of Privilege Vulnerability
Apple macOS Catalina is a specialized operating system developed by Apple for Mac computers.File Quarantine is one of the file quarantine components. A security vulnerability exists in the File Quarantine component in Apple macOS Catalina versions prior to 10.15.1. A local attacker can exploit th...
Mac OS X v10.6.6 Multiple Vulnerabilities (2011-001)
This host is missing an important security update according to Mac OS X 10.6.6 Update/Mac OS X Security Update 2011-001. OpenVAS Vulnerability Test $Id: secpodmacosxsu11-001.nasl 7015 2017-08-28 11:51:24Z teissa $ Mac OS X v10.6.6 Multiple Vulnerabilities 2011-001 Authors: Antu Sanadi Copyright:...
Mac OS X v10.6.7 Multiple Vulnerabilities (2011-003)
This host is missing an important security update according to Mac OS X 10.6.7 Update/Mac OS X Security Update 2011-003. OpenVAS Vulnerability Test $Id: secpodmacosxsu11-003.nasl 7024 2017-08-30 11:51:43Z teissa $ Mac OS X v10.6.7 Multiple Vulnerabilities 2011-003 Authors: Antu Sanadi Copyright:...
Mac OS X v10.6.7 Multiple Vulnerabilities (2011-003)
This host is missing an important security update according to Mac OS X 10.6.7 Update/Mac OS X Security Update 2011-003. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Mac OS X Multiple Vulnerabilities (Security Update 2011-003)
The remote host is running a version of Mac OS X 10.6 that does not have Security Update 2011-003 applied. This security update contains fixes for the following issues : - A definition for OSX.MacDefender.A has been added to the malware check within File Quarantine. - The system will now check...
Apple Releases Malware Detection Tool
Apple has released Security Update 2011-003 for Mac OS X in response to the recent Mac fake anti-virus software. This update: adds a malware definition to the File Quarantine application causes the File Quarantine application to automatically update its malware definition list daily removes...
Mac OS X 10.6.x < 10.6.7 Multiple Vulnerabilities
The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.7. Mac OS X 10.6.7 contains security fixes for the following products : - AirPort - Apache - AppleScript - ATS - bzip2 - CarbonCore - ClamAV - CoreText - File Quarantine - HFS - ImageIO - Image RAW - Installer - Kerbero...
CVE-2006-1649
The "restore to" selection in the "quarantine a file" capability of ESET NOD32 before 2.51.26 allows a restore to any directory that permits read access by the invoking user, which allows local users to create new files despite write-access directory permissions...
CVE-2006-1649
The "restore to" selection in the "quarantine a file" capability of ESET NOD32 before 2.51.26 allows a restore to any directory that permits read access by the invoking user, which allows local users to create new files despite write-access directory permissions...
CVE-2006-1649
The CVE-2006-1649 issue affects ESET NOD32 prior to 2.51.26. The vulnerability lies in the product’s "restore to" feature during quarantine, which allows restoring a file to any directory that the invoking user can read. This enables local users to create new files despite directory write permiss...