Apple Mac OS X DMG UFS Byte_Swap_Sbin()整数溢出漏洞

Apple Mac OS X是一款基于BSD的苹果公司开发的操作系统。 Apple Mac OS X处理恶意DMG文件存在整数溢出问题，远程攻击者可以利用漏洞对系统进行拒绝服务攻击，可能以系统进程权限执行任意指令。 UFS字节交换函数中的byteswapsbin函数此代码在FreeBSD和它的Mac OS X XNU中不包含，用于little和big-endian系统之间的文件流兼容存在整数溢出，精心构建恶意DMG文件，诱使用户解析，可导致非法内存地址访问，造成拒绝服务攻击。 Apple Mac OS X Server 10.4.8 Apple Mac OS X 10.4.8...

CVE-2007-0267: Undefined Security Weakness

The ufslookup function in the Mac OS X 10.4.8 and FreeBSD 6.1 kernels allows local users to cause a denial of service kernel panic and possibly corrupt other filesystems by mounting a crafted UNIX File System UFS DMG image that contains a corrupted directory entry struct direct, related to the...

CVE-2007-0267

The ufslookup function in the Mac OS X 10.4.8 and FreeBSD 6.1 kernels allows local users to cause a denial of service kernel panic and possibly corrupt other filesystems by mounting a crafted UNIX File System UFS DMG image that contains a corrupted directory entry struct direct, related to the...

Apple Mac OS X DMG UFS UFS_LookUp拒绝服务漏洞

Apple Mac OS X是一款基于BSD的苹果公司开发的操作系统。 Apple Mac OS X处理恶意DMG文件存在问题，远程攻击者可以利用漏洞对系统进行拒绝服务攻击。 问题是由于DMG映象文件中的特殊构建的UFS文件系统可引起ufslookup函数调用ufsdirbad，当破坏的目录条目被读取的时候，可导致内核出现问题，造成拒绝服务攻击。 Apple Mac OS X Server 10.4.8 Apple Mac OS X 10.4.8 目前没有解决方案： http://www.apple.com/macosx/ 可测试如下DMG文件：...

Mac OS X / Apple Finder multiple file system parsing vulnerabilities

Buffer overflow on oversized DMG volume label in Apple Finder. Integer overflows on UFS DMG image parsing. DoS on processing UFS and HFS+ volumes...

MOAB-10-01-2007: Apple DMG UFS ffs_mountfs() Integer Overflow Vulnerability

Summary The ffsmountfs function, part of the UFS filesystem handling code shared between FreeBSD and Mac OS X XNU is affected by an integer overflow vulnerability, leading to an exploitable denial of service condition and potential arbitrary code execution. This issue is related to those publishe...

MOAB-11-01-2007: Apple DMG UFS byte_swap_sbin() Integer Overflow Vulnerability

Summary The byteswapsbin function, one of the UFS byte swapping routines this code isn't present in FreeBSD and it's Mac OS X XNU-specific; used for compatibility of filesystem streams between little and big-endian systems is affected by a integer overflow vulnerability, leading to an exploitable...

MOAB-12-01-2007: Apple DMG UFS ufs_lookup() Denial of Service Vulnerability

Summary A specially crafted UFS filesystem in a DMG image can cause the ufslookup function to call ufsdirbad when a corrupted directory entry is being read, leading to a kernel panic denial of service. This issue can't lead to arbitrary code execution. Affected versions This issue has been verifi...

Apple Mac OSX 10.4.8 - DMG UFS UFS_LookUp Denial of Service

Apple Mac OSX 10.4.8 - DMG UFS UFSLookUp Denial of Service source: https://www.securityfocus.com/bid/22036/info Apple Mac OS X is prone to a remote denial-of-service vulnerability. This issue occurs when the UFS filesystem handler fails to handle specially crafted DMG images. A successful exploit...

Apple Mac OS X DMG UFS镜像FFS_MountFS函数整数溢出漏洞

Apple Mac OS X是苹果家族计算机所使用的操作系统。 Apple Mac OS X的ffsmountfs函数在处理UFS文件系统磁盘镜像时存在整数溢出漏洞，如果攻击者能够诱骗用户加载恶意的UFS DMG镜像的话，就会触发堆溢出，导致执行任意代码。 Apple Mac OS X 10.4.8 Apple MacOS X Server 10.4.8 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.apple.com...

Apple Mac OSX 10.4.8 - DMG UFS UFS_LookUp Denial of Service

source: https://www.securityfocus.com/bid/22036/info Apple Mac OS X is prone to a remote denial-of-service vulnerability. This issue occurs when the UFS filesystem handler fails to handle specially crafted DMG images. A successful exploit can allow a remote attacker to cause kernel panic, resulti...

Apple Mac OSX 10.4.8 - DMG UFS Byte_Swap_Sbin() Integer Overflow

Apple Mac OSX 10.4.8 - DMG UFS ByteSwapSbin Integer Overflow source: https://www.securityfocus.com/bid/22022/info Apple Mac OS X is prone to a remote integer-overflow vulnerability. This issue occurs when the UFS filesystem handler fails to handle specially crafted DMG images. A successful exploi...

Apple Mac OSX 10.4.8 - DMG UFS Byte_Swap_Sbin() Integer Overflow

source: https://www.securityfocus.com/bid/22022/info Apple Mac OS X is prone to a remote integer-overflow vulnerability. This issue occurs when the UFS filesystem handler fails to handle specially crafted DMG images. A successful exploit can allow a remote attacker to cause kernel panic, resultin...

Apple Mac OSX 10.4.8 - DMG UFS FFS_MountFS Integer Overflow

Apple Mac OSX 10.4.8 - DMG UFS FFSMountFS Integer Overflow source: https://www.securityfocus.com/bid/21993/info Apple Mac OS X is prone to a remote integer-overflow vulnerability. This issue occurs when the UFS filesystem handler fails to handle specially crafted DMG images. A successful exploit...

Apple Mac OSX 10.4.8 - DMG UFS FFS_MountFS Integer Overflow

source: https://www.securityfocus.com/bid/21993/info Apple Mac OS X is prone to a remote integer-overflow vulnerability. This issue occurs when the UFS filesystem handler fails to handle specially crafted DMG images. A successful exploit can allow a remote attacker to execute arbitrary code with...

CVE-2006-5824

Integer overflow in the ffsrdextattr function in FreeBSD 6.1 allows local users to cause a denial of service kernel panic and trigger a heap-based buffer overflow via a crafted UFS filesystem, a different vulnerability than CVE-2006-5679. NOTE: a third party states that this issue does not cross...

CVE-2006-5824

CVE-2006-5824 affects FreeBSD 6.1; integer overflow in the ffs_rdextattr function can be triggered by a crafted UFS filesystem to cause a local denial of service (kernel panic) and a heap-based buffer overflow. The entry notes this is a different issue from CVE-2006-5679, and that third parties s...

CVE-2006-5824

Integer overflow in the ffsrdextattr function in FreeBSD 6.1 allows local users to cause a denial of service kernel panic and trigger a heap-based buffer overflow via a crafted UFS filesystem, a different vulnerability than CVE-2006-5679. NOTE: a third party states that this issue does not cross...

CVE-2006-5824: Undefined Security Weakness

Integer overflow in the ffsrdextattr function in FreeBSD 6.1 allows local users to cause a denial of service kernel panic and trigger a heap-based buffer overflow via a crafted UFS filesystem, a different vulnerability than CVE-2006-5679. NOTE: a third party states that this issue does not cross...

FreeBSD UFS文件系统本地整数溢出漏洞

FreeBSD就是一种运行在Intel平台上、可以自由使用的开放源码Unix类系统。 FreeBSD 6.1内核的UFS文件系统处理代码没有正确的处理被破坏的数据结构，本地攻击者可能利用此漏洞导致整数溢出。 在加载特制的UFS文件分区时，攻击者可以直接控制所分配的内核内存数量，通过ffsmountfs函数及之后对malloc、umalargemalloc和pagealloc的调用控制对kmemalloc所传送的值。很大的或无效的大小参数会导致内核忙碌。如果从文件系统流拷贝了用户所控制数据的话，则很低的或0大小参数可能导致可利用的堆溢出。 FreeBSD FreeBSD 6.1...