CVE-2016-1760

The XPC Services API in LaunchServices in Apple iOS before 9.3 allows attackers to bypass intended event-handler restrictions and modify an arbitrary app's events via a crafted app...

CVE-2016-1760

CVE-2016-1760 affects iOS LaunchServices XPC Services API prior to iOS 9.3. The vulnerability arises from an event handler validation issue in the XPC Services API, which could allow a crafted app to bypass intended event-handler restrictions and modify events in arbitrary apps. The Apple advisor...

CVE-2 0 1 5-3 7 9 5-vulnerability warning-the black bar safety net

0x01 machshark In the previous article I have already several times mentioned machshark it. The tool one uses is that you can make a small c stub function, c-stub, the stub allows you to playback the mach message. As the article mentioned, based on MACH IPC with a state of concept. Although by...

Memory corruption

libxpc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app that sends a malformed XPC message...

CVE-2015-3777

Multiple buffer overflows in blued in the Bluetooth subsystem in Apple OS X before 10.10.5 allow local users to gain privileges via XPC messages...

Buffer overflow

Multiple buffer overflows in blued in the Bluetooth subsystem in Apple OS X before 10.10.5 allow local users to gain privileges via XPC messages...

CVE-2015-3777

CVE-2015-3777 : A buffer overflow in Apple OS X blued (Bluetooth) allows a local user to gain privileges via XPC messages. Affected: OS X before 10.10.5. Impact: local privilege escalation. Mitigation: update to macOS OS X 10.10.5 (security update HT205031) or later. Note: exploitation details ar...

Immunity Canvas: OSX_ROOTPIPE2

Name| osxrootpipe2 ---|--- CVE| CVE-2015-3673 Exploit Pack| CANVAS Description| OS X XPC Admin Framework rootpipe 2 local privilege escalation Notes| CVE Name: CVE-2015-3673 VENDOR: Apple Notes: Rootpipe 2 for Mac OS X 10.10.3 Repeatability: Multiple Times References:...

Authentication flaw

Admin Framework in Apple OS X before 10.10.4 does not properly verify XPC entitlements, which allows local users to bypass authentication and obtain admin privileges via unspecified vectors...

Mac-OSX-Privilege-Escalation

Apple Mac OS X contains a flaw in the Admin Framework that is triggered when checking XPC entitlements. This may allow a process to gain administrative privileges without properly authenticating...

CVE-2015-1130

The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors...

Authentication flaw

The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors...

CVE-2015-1130

The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors...

CVE-2015-1130

The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors...

CVE-2015-1130

CVE-2015-1130 affects Apple OS X, specifically the XPC implementation in the Admin Framework, before 10.10.3. It allows local users to bypass authentication and obtain admin privileges via unspecified vectors. Exploitation has been demonstrated (e.g., ROOTPIPE/Rootpipe PoC and Metasploit/CANVAS r...

CVE-2015-1130

The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

CVE-2014-4492

libnetcore in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not verify that certain values have the expected data type, which allows attackers to execute arbitrary code in an networkd context via a crafted XPC message from a sandboxed app, as demonstrated by la...

Command injection

coresymbolicationd in CoreSymbolication in Apple OS X before 10.10.2 does not verify that expected data types are present in XPC messages, which allows attackers to execute arbitrary code in a privileged context via a crafted app, as demonstrated by lack of verification of xpcdictionarygetvalue A...

Design/Logic Flaw

libnetcore in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not verify that certain values have the expected data type, which allows attackers to execute arbitrary code in an networkd context via a crafted XPC message from a sandboxed app, as demonstrated by la...

Type confusion

The xpcdatagetbytes function in libxpc in Apple OS X before 10.10.2 does not verify that a dictionary's Attributes key has the xpcdata data type, which allows attackers to execute arbitrary code by providing a crafted dictionary to sysmond, related to an "XPC type confusion" issue...