MacOS X 10.11 Hardlink Resource Exhaustion

/ MacOS X 10.11 hardlink bomb cause resource exhaustion Avast PoC Credit: Maksymilian Arciemowicz CXSECURITY Website: http://cxsecurity.com/ http://cert.cx/ Affected software: - Commands such as: zip, tar, find - AntiVirus: Avast, Eset32 Let's back to an old bug, which Apple does not patch until...

CVE-2014-4433

Affected software: Apple OS X versions prior to 10.10. The issue is a heap-based buffer overflow in the kernel triggered by crafted resource forks in an HFS filesystem, allowing physically proximate attackers to execute arbitrary code. Root cause: heap overflow in kernel code when handling resour...