Deja-XNU

Posted by Ian Beer, Google Project Zero This blog post revisits an old bug found by Pangu Team and combines it with a new, albeit very similar issue I recently found to try to build a "perfect" exploit for iOS 7.1.2. State of the art An idea I've wanted to play with for a while is to revisit old...

Apple TV < 7.0.2 Multiple Vulnerabilities

Binary data 8939.prm...

APPLE-SA-2014-11-17-1 iOS 8.1.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-11-17-1 iOS 8.1.1 iOS 8.1.1 is now available and addresses the following: CFNetwork Available for: iPhone 4s and later, iPod touch 5th generation and later, iPad 2 and later Impact: Website cache may not be fully cleared after leaving...

CVE-2014-4461

CVE-2014-4461 affects Apple iOS (pre-8.1.1) and Apple TV (pre-7.0.2). The root cause is a validation/handling defect in IOSharedDataQueue metadata within IODataQueue objects, enabling a crafted app to run arbitrary code in kernel/sys privileges. The linked Project Zero write‑up (Deja-XNU) explain...