CVE-2007-0732

Unspecified vulnerability in the CoreServices daemon in CarbonCore in Apple Mac OS X 10.4 through 10.4.9 allows local users to gain privileges via unspecified vectors involving "obtaining a send right to the Mach task port."...

CVE-2007-0732

CVE-2007-0732 affects Apple Mac OS X 10.4–10.4.9, via the CoreServices/CarbonCore subsystem. The vulnerability is a local privileges escalation caused by an unspecified flaw that allows a local user to obtain a send right to the Mach task port, enabling elevation of privileges. Affected component...

Apple Mac OS X fails to properly handle corrupted Universal Mach-O Binaries

Overview A vulnerability in the way Apple Mac OS X handles corrupted Universal Mach-O Binaries may result in execution of arbitrary code or denial of service. Description Apple Mac OS X uses the Mach-O file format's ability to support more than one type of machine code to create Mac OS X Universa...

Apple Mac OS X Mach-O两进制装载特权提升漏洞

Apple Mac OS X是一款基于BSD的操作系统。 Apple Mac OS X处理破坏的Mach-O两进制时存在问题，本地攻击者可以利用漏洞进行内存破坏攻击，造成拒绝服务。 攻击者可以构建一个包含合法machheader结构和破坏的loadcommand数据结构的Mach-O两进制来触发此漏洞，成功利用此漏洞可导致系统拒绝服务或导致特权提升。 Apple Mac OS X Server 10.4.8 Apple Mac OS X 10.4.8 目前没有详细解决方案提供： http://www.apple.com/macosx/ 可参考如下测试程序：...

Mac OS X Mach-O二进制程序加载整数溢出漏洞

Mac OS X是苹果家族计算机所使用的操作系统。 Mac OS X的fatfilegetarch2函数在处理被破坏的通用二进制程序（UB）存在整数溢出漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 如果本地非特权用户受骗打开了特制的Mach-O通用二进制程序的话，就可能导致执行任意内核态代码。 Apple Mac OS X 10.4.8 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.apple.com...

CVE-2006-6126

Apple Mac OS X allows local users to cause a denial of service memory corruption via a crafted Mach-O binary with a malformed loadcommand data structure...

CVE-2006-6126

Apple Mac OS X allows local users to cause a denial of service memory corruption via a crafted Mach-O binary with a malformed loadcommand data structure...

CVE-2006-6126

Technical details (affected software, root cause, impact, fixes) are not publicly available in the provided connected documents for CVE-2006-6126. Monitor for updates.

Apple Mac OS X多个命令执行及拒绝服务漏洞

Apple Mac OS X是苹果家族机器所使用的操作系统。 Apple Mac OS X的多个组件存在漏洞，攻击者可能利用这些漏洞导致执行命令或拒绝服务。 1. CFNetwork的客户端（比如Safari）允许建立匿名的SSL连接，远程非认证的SSL站可以利用这个漏洞使之看起来是认证过的。 2. Flash播放器存在漏洞，远程攻击者可能利用此漏洞执行任意命令。 3. ImageIO在处理畸形的JPEG2000图像时存在缓冲区溢出漏洞，攻击者可能利用此漏洞执行任意指令。 4. Kernel Mach中存在漏洞可以使恶意用户以高权限执行任意命令。 5...

CVE-2006-4392

The Mach kernel, as used in operating systems including 1 Mac OS X 10.4 through 10.4.7 and 2 OpenStep before 4.2, allows local users to gain privileges via a parent process that forces an exception in a setuid child and uses Mach exception ports to modify the child's thread context and task addre...

CVE-2006-4392

CVE-2006-4392 describes a local privilege-escalation in the Mach kernel used by Mac OS X 10.4.x (up to 10.4.7) and OpenStep before 4.2. The flaw allows a local user to bypass restrictions by having a parent process force an exception in a setuid child and use Mach exception ports to modify the ch...

CVE-2006-4392

The Mach kernel, as used in operating systems including 1 Mac OS X 10.4 through 10.4.7 and 2 OpenStep before 4.2, allows local users to gain privileges via a parent process that forces an exception in a setuid child and uses Mach exception ports to modify the child's thread context and task addre...

Matasano Advisory: MacOS X Mach Exception Server Privilege Escalation

Matasano Security Advisory MacOS X Mach Exception Server Privilege Escalation Release Date: Fri Sep 29 2006 Affects: MacOS X 10.4 10.4.8, 10.3., OpenStep 4.2 Severity: High - Local root privilege escalation Credit: Dino Dai Zovi ddz at matasano.com Vendor Status: MacOS X 10.4.8 fixes vulnerabilit...

Apple kernel exception handling vulnerability

Overview Apple Mac OS X may be vulnerable to privilege escalation via the Mach exception ports in the kernel. This vulnerability may allow a local user to execute arbitrary code with elevated privileges. Description Mach 3.0 is an open source microkernel used by Mac OS X that provides memory...

Apple Mac OSX 10.4.7 - Mach Exception Handling Local (10.3.x)

/ excploit.c - 28 Nov 2005 - [email protected] Exploitable Mach Exception Handling Affected: Mac OS X 10.4.6 darwin 8.6.0 and older When a process executes a setuid executable, all existing rights to the task port are invalidated, to make sure unauthorized processes do not retain control o...

Apple Mac OSX 10.4.7 - Mach Exception Handling Privilege Escalation

Apple Mac OSX 10.4.7 - Mach Exception Handling Privilege Escalation / excploit.c - 28 Nov 2005 - [email protected] Exploitable Mach Exception Handling Affected: Mac OS X 10.4.6 darwin 8.6.0 and older When a process executes a setuid executable, all existing rights to the task port are...

Apple Mac OSX 10.4.7 - Mach Exception Handling Local (10.3.x)

Apple Mac OSX 10.4.7 - Mach Exception Handling Local 10.3.x / excploit.c - 28 Nov 2005 - [email protected] Exploitable Mach Exception Handling Affected: Mac OS X 10.4.6 darwin 8.6.0 and older When a process executes a setuid executable, all existing rights to the task port are invalidated,...

Mac OS X <= 10.4.7 Mach Exception Handling Local Exploit (10.3.x 0day)

Exploit for macOS platform in category local exploits ====================================================================== Mac OS X = 10.4.7 Mach Exception Handling Local Exploit 10.3.x 0day ====================================================================== / excploit.c - 28 Nov 2005 -...

Apple Mac OSX 10.4.7 - Mach Exception Handling Privilege Escalation

/ excploit.c - 28 Nov 2005 - [email protected] Exploitable Mach Exception Handling Affected: Mac OS X 10.4.6 darwin 8.6.0 and older When a process executes a setuid executable, all existing rights to the task port are invalidated, to make sure unauthorized processes do not retain control o...

Mac OS X &lt;= 10.4.7 Mach Exception Handling Local Exploit (10.3.x 0day)

No description provided by source. / excploit.c - 28 Nov 2005 - [email protected] Exploitable Mach Exception Handling Affected: Mac OS X 10.4.6 darwin 8.6.0 and older When a process executes a setuid executable, all existing rights to the task port are invalidated, to make sure unauthorize...