118 matches found
The vulnerability of the iOS operating system allows a perpetrator to execute arbitrary code with elevated privileges or cause a service failure.
The vulnerability of the dyld component in the iOS operating system arises due to buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with elevated privileges or cause a service failure using a specially crafted application...
The vulnerability of the iOS operating system, which allows a hacker to bypass the signature verification mechanism for security checks
The vulnerability of the dyld component in the iOS operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass the code signing verification mechanism by using a specially crafted application that embeds the signature within the...
Apple iOS dyld memory corruption vulnerability
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in Apple iOS dyld, which allows remote attackers to exploit the vulnerability to build malicious apps that can be tricked into parsing by users and can execute...
CVE-2015-5876
CVE-2015-5876 is reported for Apple “Dev Tools” (dyld) on Mac OS X as a memory corruption issue that could allow arbitrary code execution with system privileges. The connected Nessus/SECURITYVULNS entries indicate Dev Tools/dyld memory corruption vulnerability across OS X 10.6.8 and later, with r...
CVE-2015-5839
dyld in Apple iOS before 9 allows attackers to bypass a code-signing protection mechanism via an app that places a crafted signature in an executable file...
The vulnerability of the Mac OS X operating system, which allows a hacker to increase their privileges
The vulnerability of the dyld library in the Mac OS X operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to increase their privileges locally...
August 2015 Apple QuickTime Security Patches
Apple on Thursday pushed out a new version of QuickTime for Windows that patched nine vulnerabilities, including a handful reported Aug. 13 by Cisco Talos and Fortinet researchers. All five flaws, if exploited, could lead to a crash of the media player or code execution in some cases, Apple said ...
Apple OS X dyld Path Checksum Vulnerability
Apple OS X is a BSD-based operating system distributed by Apple. A path-checking vulnerability in Apple OS X dyld allows local users to execute arbitrary code with system privileges...
Apple OS X Zero Day Remains Unpatched
A recently disclosed kernel-level zero-day vulnerability in Mac OS X Yosemite and Mavericks remains unpatched, though reports say Apple is developing and testing a patch. Luca Todesco, an 18-year-old security researcher from Italy, on Sunday dropped details and proof-of-concept code about the...
CVE-2015-3760
dyld in Apple OS X before 10.10.5 does not properly validate pathnames in the environment, which allows local users to gain privileges via unspecified vectors...
August 2015 Apple Security Update DYLD patch
Update: Apple yesterday patched a critical privilege escalation vulnerability in OS X 10.10 that was disclosed in early July. The flaw in OS X’s dynamic linker called dyld was specific to a new feature that allowed for error logging to arbitrary files. Researcher Stefan Esser shared details of th...
Apple OS X DYLD_PRINT_TO_FILE Environment Variable Checksum Local ROOT Privilege Gain Vulnerability
Apple Mac OS X is an operating system developed by Apple Inc. Apple Mac OS X fails to properly calibrate the DYLDPRINTTOFILE environment variable, allowing local attackers to write arbitrary files with root privileges and elevated privileges...
Apple OS X elevation of privilege 0day vulnerability
Apple OS X formerly Mac OS X is the latest version of Apple's proprietary operating system for the Macintosh computer. Apple OS X version 10.10 contains a DYLDPRINTTOFILE exploit vulnerability in the implementation of certain error logging features, which allows attackers to exploit the...
APPLE-SA-2014-11-17-1 iOS 8.1.1
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-11-17-1 iOS 8.1.1 iOS 8.1.1 is now available and addresses the following: CFNetwork Available for: iPhone 4s and later, iPod touch 5th generation and later, iPad 2 and later Impact: Website cache may not be fully cleared after leaving...
CVE-2014-4455
CVE-2014-4455 concerns a Mach-O segment overlap handling bug in dyld (iOS before 8.1.1 and Apple TV before 7.0.2) that lets a local user bypass code-signing restrictions via a crafted file. The root cause is improper validation of overlapping Mach-O segments, enabling unsigned code execution. The...
Adobe Version Cue 1.0/1.0.1 - (-lib) Local Root Exploit (OSX)
No description provided by source. / Adobe Version Cue VCNativeOSX: local root exploit. dyld by: vade79/v9 [email protected] fakehalo/realhalo Adobe Version Cue's VCNative program allows un-privileged local users to load arbitrary librariesbundles while running setuid root. this is done via the -lib...
OSX universal ROP shellcode
No description provided by source. ; universal OSX dyld ROP shellcode ; tested on OS X 10.6.8 ; ; if you don't want to compile, copy stage0 code from precompiled.txt ; and append your normal shellcode to it. ; ; usage: ; - put your 'normal' shellcode in x64shellcode.asm ; - make ; - ./sc ; ; if y...
Apple iOS < 7.1 Multiple Vulnerabilities
Binary data 8155.prm...
Apple iOS < 7.1 Multiple Vulnerabilities
Binary data appleios71check.nbin...
Mac OS X 10.x < 10.9 Multiple Vulnerabilities (BEAST)
The remote host is running a version of Mac OS X 10.x that is prior to version 10.9. The newer version contains multiple security-related fixes for the following components : - Application Firewall - App Sandbox - Bluetooth - CFNetwork - CFNetwork SSL - Console - CoreGraphics - curl - dyld -...