123 matches found
Memory corruption
An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "kext tools" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...
CVE-2016-7629
An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "kext tools" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...
CVE-2016-7629
CVE-2016-7629 is confirmed to affect macOS Sierra up to 10.12.2, specifically the kext tools component. The Apple security content entry describes a memory corruption issue in kext tools that could allow an application to execute arbitrary code with kernel privileges; the fix is described as impr...
PT-2017-1359
Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.12.2 Description The issue is related to a buffer overflow in the kext tools component of the Mac OS X operating system. This can be exploited by a remote attacker using a specially crafted application, potentially...
CVE-2016-7629: Improper Restriction of Operations within the Bounds of a Memory Buffer
An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "kext tools" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...
Apple macOS Sierra kext tools component arbitrary code execution vulnerability
Apple macOS Sierra is a specialized operating system developed by Apple for Mac computers. kext tools is one of the components for system driver installation and privilege repair. A security vulnerability exists in the kext tools component in Apple macOS Sierra versions prior to 10.12.2. An...
Mac OS X 10.x < 10.12.2 Multiple Vulnerabilities
Binary data 9840.prm...
Apple OS X AppleHSSPIHIDDriver Buffer Overflow Privilege Escalation Vulnerability
This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple OS X. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...
(Pwn2Own) Apple OS X IntelAccelerator Out-Of-Bounds Indexing Privilege Escalation Vulnerability
This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...
CVE-2015-7052
CVE-2015-7052 affects Apple OS X before 10.11.2 where kext tools mishandle kernel-extension loading, enabling local users to gain privileges via unspecified vectors. The vulnerability stems from the kernel-extension loading path, with an update shipped in OS X 10.11.2 to mitigate. Practical impac...
PT-2015-3114
Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11.2 Description The issue is related to insufficient access control to certain functions in the Mac OS X operating system kernel. It allows a local attacker to exploit the weakness and potentially gain elevated...
Mac OS X Multiple Vulnerabilities (Security Updates 2015-005 / 2015-008)
The remote host is running a version of Mac OS X 10.9.5 or 10.10.5 that is missing Security Update 2015-005 or 2015-008. It is, therefore, affected by multiple vulnerabilities in the following components : - apachemodphp - AppSandbox - Bluetooth - CFNetwork HTTPProtocol - Compression -...
CVE-2015-7052: Undefined Security Weakness
kext tools in Apple OS X before 10.11.2 mishandles kernel-extension loading, which allows local users to gain privileges via unspecified vectors...
Mac OS X 10.11.x < 10.11.2 Multiple Vulnerabilities
The remote host is running a version of Mac OS X that is 10.11.x prior to 10.11.2. It is, therefore, affected by multiple vulnerabilities in the following components : - apachemodphp - AppSandbox - Bluetooth - CFNetwork HTTPProtocol - Compression - Configuration Profiles - CoreGraphics - CoreMedi...
Mac OS X < 10.10.4 Multiple Vulnerabilities
Binary data 8801.prm...
OS X 10.10 - DYLD_PRINT_TO_FILE Local Privilege Escalation
DYLDPRINTTOFILE local privilege escalation vulnerability in OS X 10.10 - 10.10.4 !/bin/sh Simple Proof of Concept Exploit for the DYLDPRINTTOFILE local privilege escalation vulnerability in OS X 10.10 - 10.10.4 C Copyright 2015 Stefan Esser Wait months for a fix from Apple or install the followin...
Apple OSX 10.10 DYLD_PRINT_TO_FILE Local Privilege Escalation Exploit
Exploit for macOS platform in category local exploits !/bin/sh Simple Proof of Concept Exploit for the DYLDPRINTTOFILE local privilege escalation vulnerability in OS X 10.10 - 10.10.4 C Copyright 2015 Stefan Esser Wait months for a fix from Apple or install the following KEXT as protection...
Race condition
Race condition in kext tools in Apple OS X before 10.10.4 allows local users to bypass intended signature requirements for kernel extensions by leveraging improper pathname validation...
CVE-2015-3709
CVE-2015-3709 refers to a TOCTOU race condition in Apple’s kext tools on macOS OS X Yosemite prior to 10.10.4. The flaw occurs during kernel-extension path validation, allowing a local user to bypass signature checks and load unsigned kernel extensions. Public details in connected docs indicate t...