PT-2015-4084

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.10.2 Description The issue allows attackers to execute arbitrary code in a privileged context via a crafted app. This is due to the lack of verification of expected data types in XPC messages. Specifically, the...

OS X 10.9.x - sysmond XPC Privilege Escalation Vulnerability

Exploit for macOS platform in category local exploits / Source: https://code.google.com/p/google-security-research/issues/detail?id=121 / / tested on OS X 10.9.5 - uses some hard-coded offsets which will have to be fixed-up for other versions! this poc uses liblorgnette to resolve some private...