Exploring a New Class of Kernel Exploit Primitive

The security landscape is dynamic, changing often and as a result, attack surfaces evolve. MSRC receives a wide variety of cases spanning different products, bug types and exploit primitives. One particularly interesting primitive we see is an arbitrary kernel pointer read. These often happen whe...

Exploring a New Class of Kernel Exploit Primitive

The security landscape is dynamic, changing often and as a result, attack surfaces evolve. MSRC receives a wide variety of cases spanning different products, bug types and exploit primitives. One particularly interesting primitive we see is an arbitrary kernel pointer read. These often happen whe...

PT-2014-4154

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.9.4 Description The issue allows local users to bypass the Address Space Layout Randomization ASLR protection mechanism. This is achieved by leveraging read access to a kernel pointer in an IOKit object, which i...