625 matches found
CVE-2007-6359
The csvalidatepage function in bsd/kern/ubcsubr.c in the xnu kernel 1228.0 and earlier in Apple Mac OS X 10.5.1 allows local users to cause a denial of service failed assertion and system crash via a crafted signed Mach-O binary that causes the hashes function to return NULL...
CVE-2007-6359: Undefined Security Weakness
The csvalidatepage function in bsd/kern/ubcsubr.c in the xnu kernel 1228.0 and earlier in Apple Mac OS X 10.5.1 allows local users to cause a denial of service failed assertion and system crash via a crafted signed Mach-O binary that causes the hashes function to return NULL...
Integer overflow
Integer overflow in the loadthreadstack function in the Mach-O loader machloader.c in the xnu kernel in Apple Mac OS X 10.4 through 10.5.1 allows local users to cause a denial of service infinite loop via a crafted Mach-O binary...
CVE-2007-6261
Integer overflow in the loadthreadstack function in the Mach-O loader machloader.c in the xnu kernel in Apple Mac OS X 10.4 through 10.5.1 allows local users to cause a denial of service infinite loop via a crafted Mach-O binary...
CVE-2007-6261
CVE-2007-6261 affects Apple Mac OS X (xnu kernel) 10.4–10.5.1. The vulnerability is an integer overflow in the load_threadstack function of mach_loader.c, enabling a local attacker to trigger a denial of service (infinite loop) through a crafted Mach-O binary. Connected documents do not provide e...
CVE-2007-6261: Undefined Security Weakness
Integer overflow in the loadthreadstack function in the Mach-O loader machloader.c in the xnu kernel in Apple Mac OS X 10.4 through 10.5.1 allows local users to cause a denial of service infinite loop via a crafted Mach-O binary...
Apple Mac OS X xnu <= 1228.0 mach-o Local Kernel Denial of Service PoC
No description provided by source. / xnu-macho-dos.c Copyright c 2007 by [email protected] Apple MACOS X xnu = 1228.0 local kernel DoS POC by mu-b - Thu 15 Nov 2007 - Tested on: Apple MACOS X 10.4 xnu-792.22.51/RELEASEI386 Apple MACOS X 10.5.1 xnu-1228.0.21/RELEASEI386 Apple MACOS X 10.5.1...
Apple Mac OS X fails to properly handle corrupted Universal Mach-O Binaries
Overview A vulnerability in the way Apple Mac OS X handles corrupted Universal Mach-O Binaries may result in execution of arbitrary code or denial of service. Description Apple Mac OS X uses the Mach-O file format's ability to support more than one type of machine code to create Mac OS X Universa...
Mac OS X Mach-O二进制程序加载整数溢出漏洞
Mac OS X是苹果家族计算机所使用的操作系统。 Mac OS X的fatfilegetarch2函数在处理被破坏的通用二进制程序（UB）存在整数溢出漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 如果本地非特权用户受骗打开了特制的Mach-O通用二进制程序的话，就可能导致执行任意内核态代码。 Apple Mac OS X 10.4.8 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.apple.com...
Apple Mac OS X Mach-O两进制装载特权提升漏洞
Apple Mac OS X是一款基于BSD的操作系统。 Apple Mac OS X处理破坏的Mach-O两进制时存在问题，本地攻击者可以利用漏洞进行内存破坏攻击，造成拒绝服务。 攻击者可以构建一个包含合法machheader结构和破坏的loadcommand数据结构的Mach-O两进制来触发此漏洞，成功利用此漏洞可导致系统拒绝服务或导致特权提升。 Apple Mac OS X Server 10.4.8 Apple Mac OS X 10.4.8 目前没有详细解决方案提供： http://www.apple.com/macosx/ 可参考如下测试程序：...
CVE-2006-6126
Apple Mac OS X allows local users to cause a denial of service memory corruption via a crafted Mach-O binary with a malformed loadcommand data structure...
CVE-2006-6126
Apple Mac OS X allows local users to cause a denial of service memory corruption via a crafted Mach-O binary with a malformed loadcommand data structure...
CVE-2006-6126
Technical details (affected software, root cause, impact, fixes) are not publicly available in the provided connected documents for CVE-2006-6126. Monitor for updates.
CVE-2006-6129: Undefined Security Weakness
Integer overflow in the fatfilegetarch2 in Apple Mac OS X allows local users to cause a denial of service and possibly execute arbitrary code via a crafted Mach-O Universal program that triggers memory corruption...
CVE-2006-6126: Undefined Security Weakness
Apple Mac OS X allows local users to cause a denial of service memory corruption via a crafted Mach-O binary with a malformed loadcommand data structure...
FailureToLaunch-2.pl.txt
!/usr/bin/perl http://www.digitalmunition.com/FailureToLaunch-ppc.pl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom Much appreciation goes to John H for all kindsa random shit like exploiting Veritas and other random things in the past core... where the hell are you fool. This is just a...
Mac OS X <= 10.4.6 (launchd) Local Format String Exploit (ppc)
Exploit for macOS platform in category local exploits ============================================================== Mac OS X = 10.4.6 launchd Local Format String Exploit ppc ============================================================== !/usr/bin/perl...
Mac OS X <= 10.4.6 (launchd) Local Format String Exploit (x86)
No description provided by source. !/usr/bin/perl http://www.digitalmunition.com/FailureToLaunch.pl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom This is a practical application of Non Executable Stack Lovin - http://www.digitalmunition.com/NonExecutableLovin.txt This code currently jum...
Apple Mac OSX 10.4.6 (x86) - 'launchd' Local Format String
!/usr/bin/perl http://www.digitalmunition.com/FailureToLaunch.pl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom This is a practical application of Non Executable Stack Lovin - http://www.digitalmunition.com/NonExecutableLovin.txt This code currently jumps into 0x1811111 via dyldstubclose...
os-x/PPC/x86 execve("/bin/sh",{"/bin/sh",NULL},NULL) 121 bytes
Exploit for multiple platform in category shellcode ============================================================== os-x/PPC/x86 execve"/bin/sh","/bin/sh",NULL,NULL 121 bytes ============================================================== / - dual.c - by email protected...