CVE-2017-2437

Summary: CVE-2017-2437 affects macOS Sierra prior to 10.12.4, specifically the IOFireWireAVC component, enabling a local attacker to gain privileges or cause a denial of service via memory corruption. The Apple security content for macOS Sierra 10.12.4 documents the update and lists IOFireWireAVC...

Mac OS X 10.x < 10.12.4 Multiple Vulnerabilities

Binary data 700032.prm...

macOS 10.12.x < 10.12.4 Multiple Vulnerabilities (httpoxy)

The remote host is running a version of macOS that is 10.12.x prior to 10.12.4. It is, therefore, affected by multiple vulnerabilities in multiple components, some of which are remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these remote code execution...

macOS IOFireWireAVC Kernel Extension Out of Bounds Vulnerability（CVE-2017-2436）

Technical Details The vulnerable code can be found in IOFireWireAVC-424/IOFireWireAVC/IOFireWireAVCUserClient.cpp: ... case kIOFWAVCUserClientCreateAsyncAVCCommand: result = CreateAVCAsyncCommandUInt8arguments-structureInput, UInt8arguments-structureOutput, arguments-structureInputSize,...