CVE-2017-2437

An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "IOFireWireAVC" component. It allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors...

CVE-2017-2436

CVE-2017-2436 concerns the IOFireWireAVC kernel extension in macOS Sierra (affected: macOS before 10.12.4). The connected documents reveal a concrete root cause: in IOFireWireAVCUserClient::CreateAVCAsyncCommand, the length parameter len is used to compute cmdLen, then a pointer from the user-con...

CVE-2017-2437

Summary: CVE-2017-2437 affects macOS Sierra prior to 10.12.4, specifically the IOFireWireAVC component, enabling a local attacker to gain privileges or cause a denial of service via memory corruption. The Apple security content for macOS Sierra 10.12.4 documents the update and lists IOFireWireAVC...

PT-2017-1673

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.12.4 Description The issue involves the IOFireWireAVC component and allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors. It is caused by a buffer overflow in...

PT-2017-1674

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.12.4 Description The issue is related to a buffer overflow in the IOFireWireAVC component of the Mac OS X operating system. This can be exploited by a remote attacker to execute arbitrary code in a privileged context...

CVE-2017-2436: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "IOFireWireAVC" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2017-2437: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "IOFireWireAVC" component. It allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors...

Mac OS X 10.x < 10.12.4 Multiple Vulnerabilities

Binary data 700032.prm...

macOS 10.12.x < 10.12.4 Multiple Vulnerabilities (httpoxy)

The remote host is running a version of macOS that is 10.12.x prior to 10.12.4. It is, therefore, affected by multiple vulnerabilities in multiple components, some of which are remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these remote code execution...

macOS IOFireWireAVC Kernel Extension Out of Bounds Vulnerability（CVE-2017-2436）

Technical Details The vulnerable code can be found in IOFireWireAVC-424/IOFireWireAVC/IOFireWireAVCUserClient.cpp: ... case kIOFWAVCUserClientCreateAsyncAVCCommand: result = CreateAVCAsyncCommandUInt8arguments-structureInput, UInt8arguments-structureOutput, arguments-structureInputSize,...