CVE-2011-1053

Unspecified vulnerability in the Mach-O input file loader in Hex-Rays IDA Pro 5.7 and 6.0 allows user-assisted remote attackers to cause a denial of service out-of-memory exception and inability to analyze code via a crafted Mach-O file...

CVE-2011-1049

CVE-2011-1049 affects Hex-Rays IDA Pro versions 5.7 and 6.0, where the Mach-O input file loader contains a buffer overflow in its Mach-O parsing. The vulnerability can be triggered by a crafted Mach-O file and may allow user-assisted remote attackers to cause a crash (DoS) and potentially execute...

CVE-2011-1053

Hex-Rays IDA Pro is affected by a vulnerability in the Mach-O input file loader (IDA Pro versions 5.7 and 6.0) that allows user‑assisted remote attackers to trigger a denial of service (out‑of‑memory and inability to analyze code) by using a crafted Mach‑O file. The OpenVAS/OpenVAS‑style entry an...

CVE-2011-1049

Buffer overflow in the Mach-O input file loader in Hex-Rays IDA Pro 5.7 and 6.0 allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted Macho-O file...

KLA10216 Multiple vulnerabilities in IDA Pro

Multiple critical vulnerabilities have been found in IDA Pro. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code or conduct other unknown attacks. Below is a complete list of vulnerabilities 1. Unspecified vulnerabilities can be exploited from...

IDA Pro Mach-O Loader Buffer Overflow

The version of IDA Pro, an interactive disassembler, installed on the remote host is either 5.7 or 6.0 and includes a version of the Mach-O loader that is affected by a buffer overflow vulnerability. By tricking a user into opening a specially crafted Mac OS X Mach-O file using the affected loade...

CVE-2009-0156

Launch Services in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to cause a denial of service persistent Finder crash via a crafted Mach-O executable that triggers an out-of-bounds memory read...

Mac OS X Inject Mach-O Bundle, Reverse TCP Stager

Inject a custom Mach-O bundle into the exploited process. Connect, read length, read buffer, execute This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework ReverseTcp ------- Mac OS X x86 Reverse TCP stager. module...

Mac OS X Inject Mach-O Bundle, Bind TCP Stager

Inject a custom Mach-O bundle into the exploited process. Listen, read length, read buffer, execute This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework BindTcp ------- Mac OS X x86 bind TCP stager. module MetasploitModule...

Design/Logic Flaw

The csvalidatepage function in bsd/kern/ubcsubr.c in the xnu kernel 1228.0 and earlier in Apple Mac OS X 10.5.1 allows local users to cause a denial of service failed assertion and system crash via a crafted signed Mach-O binary that causes the hashes function to return NULL...

CVE-2007-6359

The csvalidatepage function in bsd/kern/ubcsubr.c in the xnu kernel 1228.0 and earlier in Apple Mac OS X 10.5.1 allows local users to cause a denial of service failed assertion and system crash via a crafted signed Mach-O binary that causes the hashes function to return NULL...

Integer overflow

Integer overflow in the loadthreadstack function in the Mach-O loader machloader.c in the xnu kernel in Apple Mac OS X 10.4 through 10.5.1 allows local users to cause a denial of service infinite loop via a crafted Mach-O binary...

CVE-2007-6261

Integer overflow in the loadthreadstack function in the Mach-O loader machloader.c in the xnu kernel in Apple Mac OS X 10.4 through 10.5.1 allows local users to cause a denial of service infinite loop via a crafted Mach-O binary...

CVE-2007-6261

CVE-2007-6261 affects Apple Mac OS X (xnu kernel) 10.4–10.5.1. The vulnerability is an integer overflow in the load_threadstack function of mach_loader.c, enabling a local attacker to trigger a denial of service (infinite loop) through a crafted Mach-O binary. Connected documents do not provide e...

Apple Mac OS X xnu <= 1228.0 mach-o Local Kernel Denial of Service PoC

No description provided by source. / xnu-macho-dos.c Copyright c 2007 by [email protected] Apple MACOS X xnu = 1228.0 local kernel DoS POC by mu-b - Thu 15 Nov 2007 - Tested on: Apple MACOS X 10.4 xnu-792.22.51/RELEASEI386 Apple MACOS X 10.5.1 xnu-1228.0.21/RELEASEI386 Apple MACOS X 10.5.1...

Apple Mac OS X fails to properly handle corrupted Universal Mach-O Binaries

Overview A vulnerability in the way Apple Mac OS X handles corrupted Universal Mach-O Binaries may result in execution of arbitrary code or denial of service. Description Apple Mac OS X uses the Mach-O file format's ability to support more than one type of machine code to create Mac OS X Universa...

Apple Mac OS X Mach-O两进制装载特权提升漏洞

Apple Mac OS X是一款基于BSD的操作系统。 Apple Mac OS X处理破坏的Mach-O两进制时存在问题，本地攻击者可以利用漏洞进行内存破坏攻击，造成拒绝服务。 攻击者可以构建一个包含合法machheader结构和破坏的loadcommand数据结构的Mach-O两进制来触发此漏洞，成功利用此漏洞可导致系统拒绝服务或导致特权提升。 Apple Mac OS X Server 10.4.8 Apple Mac OS X 10.4.8 目前没有详细解决方案提供： http://www.apple.com/macosx/ 可参考如下测试程序：...

Mac OS X Mach-O二进制程序加载整数溢出漏洞

Mac OS X是苹果家族计算机所使用的操作系统。 Mac OS X的fatfilegetarch2函数在处理被破坏的通用二进制程序（UB）存在整数溢出漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 如果本地非特权用户受骗打开了特制的Mach-O通用二进制程序的话，就可能导致执行任意内核态代码。 Apple Mac OS X 10.4.8 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.apple.com...

CVE-2006-6126

Apple Mac OS X allows local users to cause a denial of service memory corruption via a crafted Mach-O binary with a malformed loadcommand data structure...

CVE-2006-6126

Technical details (affected software, root cause, impact, fixes) are not publicly available in the provided connected documents for CVE-2006-6126. Monitor for updates.