Adobe Flash Player for Mac <= 19.0.0.185 Multiple Vulnerabilities (APSB15-25)

The version of Adobe Flash Player installed on the remote Mac OS X host is equal or prior to version 19.0.0.185. It is, therefore, affected by multiple vulnerabilities : - An unspecified vulnerability exists related to the defense-in-depth feature in the Flash Broker API. No other details are...

Mac OS X < 10.10.4 Multiple Vulnerabilities

Binary data 8801.prm...

PT-2015-2288

Name of the Vulnerable Software and Affected Versions Mac OS X affected versions not specified Description The issue is caused by a buffer overflow in the IOGraphics component of the Mac OS X operating system. Exploitation of this issue may allow a local attacker to elevate privileges or cause a...

PT-2015-2278

Name of the Vulnerable Software and Affected Versions Mac OS X affected versions not specified Description The issue is caused by a buffer overflow in the IOGraphics component of the Mac OS X operating system. Exploitation of this issue may allow a local attacker to elevate privileges or cause a...

PT-2015-2279

Name of the Vulnerable Software and Affected Versions Mac OS X affected versions not specified Description The issue is caused by a buffer overflow in the IOGraphics component of the Mac OS X operating system. Exploitation of this issue may allow a local attacker to elevate privileges or cause a...

PT-2015-2282

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11 Description The issue is related to a component in Mac OS X, specifically the Notes application, which lacks protection for certain data. This can be exploited by a local attacker to gain access to sensitive...

PT-2015-2296

Name of the Vulnerable Software and Affected Versions Heimdal versions prior to 10.11 Description The issue is related to inadequate access control in the Heimdal component of the Mac OS X operating system. It allows a remote attacker to conduct replay attacks against the SMB server by exploiting...

PT-2015-2248

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.11 Description The issue is related to errors in the code of the Telephony component in Mac OS X. It can be exploited by a local attacker to bypass restrictions on telephone calls when the Continuity feature is...

PT-2015-2272

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.11 Description The issue is related to the implementation of the backup mechanism in the Time Machine component of Mac OS X, which lacks protection for certain service data. This could allow a local attacker to ga...

PT-2015-2297

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11 Description The issue is related to errors in the code of the EFI component in Mac OS X, which can be exploited by a local attacker to modify the firmware using a Thunderbolt interface. This can be achieved b...

PT-2015-2284

Name of the Vulnerable Software and Affected Versions Mail component in Mac OS X versions prior to 10.11 Description The issue is related to the Mail Drop feature in the Mail component, which mishandles encryption parameters for attachments. This makes it easier for attackers to obtain sensitive...

PT-2015-2277

Name of the Vulnerable Software and Affected Versions Mac OS X affected versions not specified Description The issue is caused by a buffer overflow in the IOGraphics component of the Mac OS X operating system. Exploitation of this issue may allow a local attacker to elevate privileges or cause a...

Mac OS X < 10.11 Multiple Vulnerabilities (GHOST)

The remote host is running a version of Mac OS X that is 10.6.8 or later but prior to 10.11. It is, therefore, affected by multiple vulnerabilities in the following components : - Address Book - AirScan - apachemodphp - Apple Online Store Kit - AppleEvents - Audio - bash - Certificate Trust Polic...

Apple OS X Root Privilege Extraction Vulnerability

Apple OS X is an operating system developed by Apple Inc. A restriction vulnerability exists in the private architecture of Apple OS X installations containing privileged programs, which allows local users to exploit the vulnerability to gain root privileges...

issetugid() + rsh + libmalloc OS X Local Root Exploit

The default root-suid binary /usr/bin/rsh on Mac OS X uses execv in an insecure manner. /usr/bin/rsh will invoke /usr/bin/rlogin if launched with only a host argument, without dropping privileges or clearing the environment. This exploit will pass "MallocLogFile" to /usr/bin/rsh, which is then...

Mac OS X : Apple Safari < 9.0 Multiple Vulnerabilities

The version of Apple Safari installed on the remote Mac OS X host is prior to 9.0. It is, therefore, affected by multiple vulnerabilities in the following components : - Safari - Safari Downloads - Safari Extensions - Safari Safe Browsing - WebKit - WebKit CSS - WebKit JavaScript Bindings - WebKi...

Apple Xcode < 7.0 (Mac OS X) (POODLE)

The version of Apple Xcode installed on the remote Mac OS X host is prior to 7.0. It is, therefore, affected by the multiple vulnerabilities : - A memory leak issue exists in file d1srtp.c related to the DTLS SRTP extension handling and specially crafted handshake messages. An attacker can exploi...

Mac OS X 10.9.5 / 10.10.5 - rsh/libmalloc Privilege Escalation

Exploit for macOS platform in category local exploits CVE-2015-5889: issetugid + rsh + libmalloc osx local root tested on osx 10.9.5 / 10.10.5 jul/2015 by rebel import os,time,sys env = s = os.stat"/etc/sudoers".stsize env'MallocLogFile' = '/etc/crontab' env'MallocStackLogging' = 'yes'...

Mac OS X 10.9.5 / 10.10.5 - rsh/libmalloc Privilege Escalation

This module writes to the sudoers file without root access by exploiting rsh and malloc log files. Makes sudo require no password, giving access to su even if root is disabled. Works on OS X 10.9.5 to 10.10.5 patched on 10.11. Module Options msf use exploit/osx/local/rsh/libmalloc msf...

Apple Mac OS X Gatekeeper Bypass

Gatekeeper is Mac OS X’s guardian against rogue applications and malware sneaking into Apple’s famous walled garden. It’s also been a favorite target of researchers and advanced attackers desperate to gain control of Apple devices. Tomorrow at Virus Bulletin in Prague, researcher Patrick Wardle,...