Apple macOS Sierra 10.12.1 - IOFireWireFamily FireWire Port Denial of Service Exploit

Exploit for macOS platform in category dos / poc / IOFireWireFamily-overflow.c Brandon Azad Buffer overflow reachable from IOFireWireUserClient::localConfigDirectoryPublish. Download: https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/bin-sploits/44235.zip / include...

The vulnerability of the IOFireWireFamily component in the Mac OS X operating system allows a hacker to execute arbitrary code in a privileged context or cause a service failure.

The vulnerability of the IOFireWireFamily component in the Mac OS X operating system arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context or cause a service failure memory corrupti...

CVE-2017-7119

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "IOFireWireFamily" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-7119

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "IOFireWireFamily" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-7077

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "IOFireWireFamily" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2017-7077

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "IOFireWireFamily" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

Memory corruption

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "IOFireWireFamily" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

Design/Logic Flaw

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "IOFireWireFamily" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-7119

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "IOFireWireFamily" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-7119

CVE-2017-7119 affects macOS prior to 10.13 in the IOFireWireFamily driver and allows a crafted app to bypass memory-read restrictions, potentially reading restricted memory locally (CVE demonstrated impact: high confidentiality risk). The issue is documented with both NVD details and Apple securi...

CVE-2017-7077

CVE-2017-7077 involves memory corruption in IOFireWireFamily on macOS before 10.13, enabling a crafted app to execute arbitrary code in a privileged context or cause a memory corruption DoS. Exploitation is local and requires user interaction. Affected product: macOS/IOFireWireFamily. Root cause:...

CVE-2017-7077

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "IOFireWireFamily" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

PT-2017-17524

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.13 Description The issue involves the IOFireWireFamily component and allows attackers to bypass intended memory-read restrictions via a crafted app. Recommendations For macOS versions prior to 10.13, update to versio...

CVE-2017-7077: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "IOFireWireFamily" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2017-7119: Improper Input Validation

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "IOFireWireFamily" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

Apple macOS High Sierra IOFireWireFamily Security Bypass Vulnerability

Apple macOS High Sierra is a suite of Apple's proprietary operating systems developed specifically for Mac computers.IOFireWireFamily is one of the FireWire interface drivers. A security vulnerability exists in the IOFireWireFamily component of Apple macOS High Sierra versions prior to 10.13. An...

PT-2017-3079

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.13 Description The issue is related to a buffer overflow in the IOFireWireFamily component of the Mac OS X operating system. This can be exploited by a remote attacker using a specially crafted application, potential...

Apple macOS Sierra 10.12.1 - 'IOFireWireFamily' FireWire Port Denial of Service

/ IOFireWireFamily-overflow.c Brandon Azad Buffer overflow reachable from IOFireWireUserClient::localConfigDirectoryPublish. Download: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/44235.zip / include include include int main int ret = 0; ioservicet service =...

Apple macOS Sierra 10.12.1 - IOFireWireFamily FireWire Port Denial of Service

Apple macOS Sierra 10.12.1 - IOFireWireFamily FireWire Port Denial of Service / IOFireWireFamily-overflow.c Brandon Azad Buffer overflow reachable from IOFireWireUserClient::localConfigDirectoryPublish. Download:...

Apple macOS Sierra 10.12.3 - 'IOFireWireFamily-null-deref' FireWire Port Denial of Service

/ IOFireWireFamily-null-deref.c Brandon Azad NULL pointer dereference in IOFireWireUserClient::setAsyncRefIsochChannelForceStop. Download: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/44236.zip / include int main int ret = 0; ioservicet service =...