MacOS kernel code execution due to lack of bounds checking in AppleIntelCapriController::GetLinkConfig (CVE-2017-2443)

Selector 0x921 of IntelFBClientControl ends up in AppleIntelCapriController::GetLinkConfig This method takes a structure input and output buffer. It reads an attacker controlled dword from the input buffer which it uses to index an array of pointers with no bounds checking: This pointer is passed...

CVE-2017-2443

creationtimestamp| type| source ---|---|--- 2017-04-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41790...

CVE-2017-2443

CVE-2017-2443 affects macOS Sierra (pre-10.12.4) via the Intel Graphics Driver. Root cause is a memory corruption/bounds-check issue that can allow arbitrary code execution in kernel context or cause a denial of service. A fix is available in macOS 10.12.4 Security Update (and related El Capitan/...