Apple iOS ‘openSharedCacheFile’函数基于栈的缓冲区溢出漏洞

CVE-2013-3950 Apple iOS是美国苹果（Apple）公司为移动设备所开发的操作系统。支持的设备包括iPhone、iPod Touch、iPad、Apple TV。 Apple iOS 5.1.x版本和6.x至6.1.3版本中的dyld中的dyld.cpp中的‘openSharedCacheFile’函数中存在基于栈的缓冲区溢出漏洞。攻击者可通过DYLDSHAREDCACHEDIR环境变量中较长的字符串利用该漏洞实施越狱攻击。 0 Apple iOS 5.1.x Apple iOS 6.x Apple iOS 6.1.3...

CVE-2013-3950

Stack-based buffer overflow in the openSharedCacheFile function in dyld.cpp in dyld in Apple iOS 5.1.x and 6.x through 6.1.3 makes it easier for attackers to conduct untethering attacks via a long string in the DYLDSHAREDCACHEDIR environment variable...

Design/Logic Flaw

dyld in Apple iOS before 6.1.3 and Apple TV before 5.2.1 does not properly manage the state of file loading for Mach-O executable files, which allows local users to bypass intended code-signing requirements via a file that contains overlapping segments...

CVE-2013-0977

CVE-2013-0977 affects Apple iOS prior to 6.1.3 and Apple TV prior to 5.2.1. The issue is a state-management flaw in loading Mach-O executable files with overlapping segments, which allows a local user to bypass code-signing requirements. Impact, as stated in multiple sources, is local execution o...

CVE-2013-0977

dyld in Apple iOS before 6.1.3 and Apple TV before 5.2.1 does not properly manage the state of file loading for Mach-O executable files, which allows local users to bypass intended code-signing requirements via a file that contains overlapping segments...

Apple iOS < 7.0 Multiple Vulnerabilities

Binary data 8013.prm...

OSX - Universal ROP shellcode

OSX - Universal ROP shellcode. Shellcode exploit for osx platform ; universal OSX dyld ROP shellcode ; tested on OS X 10.6.8 ; ; if you don't want to compile, copy stage0 code from precompiled.txt ; and append your normal shellcode to it. ; ; usage: ; - put your 'normal' shellcode in...

Apple Mac OSX EvoCam Web Server (Snow Leopard) - ROP Remote Overflow

!/usr/bin/python EvoCam Web Server OSX 3.6.6 and 3.6.7 import socket import struct SHELL = "\xdb\xd2\x29\xc9\xb1\x27\xbf\xb1\xd5\xb6\xd3\xd9\x74\x24" "\xf4\x5a\x83\xea\xfc\x31\x7a\x14\x03\x7a\xa5\x37\x43\xe2" "\x05\x2e\xfc\x45\xd5\x11\xad\x17\x65\xf0\x80\x18\x8a\x71"...

Apple Mac OSX EvoCam Web Server (Snow Leopard) - ROP Remote Overflow

Apple Mac OSX EvoCam Web Server Snow Leopard - ROP Remote Overflow !/usr/bin/python EvoCam Web Server OSX 3.6.6 and 3.6.7 import socket import struct SHELL = "\xdb\xd2\x29\xc9\xb1\x27\xbf\xb1\xd5\xb6\xd3\xd9\x74\x24" "\xf4\x5a\x83\xea\xfc\x31\x7a\x14\x03\x7a\xa5\x37\x43\xe2"...

UFO: Alien Invasion IRC Client Buffer Overflow

This module exploits a buffer overflow in the IRC client component of UFO: Alien Invasion 2.2.1. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'UFO: Alien Invasion IRC Client Buffer Overflow',...

[RISE-2007001] Apple Mac OS X 10.4.x kernel shared_region_map_file_np&#40;&#41; memory corruption vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 RISE-2007001 Apple Mac OS X 10.4.x kernel sharedregionmapfilenp memory corruption vulnerability Released: January 19, 2007 Last updated: January 19, 2007 INTRODUCTION There exists a vulnerability within a function of the Apple Mac OS X 10.4.x kernel...

VLC Media Player 0.8.6 (udp://) Format String Exploit (x86)

Exploit for macOS platform in category local exploits =========================================================== VLC Media Player 0.8.6 udp:// Format String Exploit x86 =========================================================== !/usr/bin/perl http://www.digitalmunition.com/VLCMediaSlayer-x86.pl...

CVE-2006-3500

The dynamic linker dyld in Apple Mac OS X 10.4.7 allows local users to execute arbitrary code via an "improperly handled condition" that leads to use of "dangerous paths," probably related to an untrusted search path vulnerability...

CVE-2006-3499

The dynamic linker dyld in Apple Mac OS X 10.3.9 allows local users to obtain sensitive information via unspecified dynamic linker options that affect the use of standard error stderr by privileged applications...

CVE-2006-3499

CVE-2006-3499 affects Apple Mac OS X 10.3.9 where a malicious local user can influence dynamic linker options that affect stderr, allowing exposure of sensitive information by privileged applications. The underlying issue is within the dynamic linker (dyld) behavior on 10.3.9. Documents indicate ...

Apple Mac OSX 10.4.6 (x86) - 'launchd' Local Format String

!/usr/bin/perl http://www.digitalmunition.com/FailureToLaunch.pl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom This is a practical application of Non Executable Stack Lovin - http://www.digitalmunition.com/NonExecutableLovin.txt This code currently jumps into 0x1811111 via dyldstubclose...

Adobe Version Cue 1.0/1.0.1 (OSX) - '-lib' Local Privilege Escalation

/ Adobe Version Cue VCNativeOSX: local root exploit. dyld by: vade79/v9 [email protected] fakehalo/realhalo Adobe Version Cue's VCNative program allows un-privileged local users to load arbitrary libraries"bundles" while running setuid root. this is done via the "-lib" command-line option. note:...