538 matches found
PT-2017-15014
Name of the Vulnerable Software and Affected Versions Golden Frog VyprVPN versions prior to 2.15.0.5828 Description The issue concerns an unprotected XPC service in the vyprvpnservice launch daemon, which allows attackers to modify the OpenVPN configuration and arguments passed to the OpenVPN...
iOS / macOS - xpc_data Objects Sandbox Escape Privelege Escalation Exploit
Exploit for multiple platform in category local exploits Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1247 When XPC serializes large xpcdata objects it creates mach memory entry ports to represent the memory region then transfers that region to the receiving process by sendin...
Apple macOSiOS - xpc_data Objects Sandbox Escape Privilege Escalation
Apple macOSiOS - xpcdata Objects Sandbox Escape Privilege Escalation Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1247 When XPC serializes large xpcdata objects it creates mach memory entry ports to represent the memory region then transfers that region to the receiving proce...
Design/Logic Flaw
The XPC Services API in LaunchServices in Apple iOS before 9.3 allows attackers to bypass intended event-handler restrictions and modify an arbitrary app's events via a crafted app...
CVE-2016-1760
The XPC Services API in LaunchServices in Apple iOS before 9.3 allows attackers to bypass intended event-handler restrictions and modify an arbitrary app's events via a crafted app...
CVE-2016-1760
The XPC Services API in LaunchServices in Apple iOS before 9.3 allows attackers to bypass intended event-handler restrictions and modify an arbitrary app's events via a crafted app...
CVE-2016-1760
CVE-2016-1760 affects iOS LaunchServices XPC Services API prior to iOS 9.3. The vulnerability arises from an event handler validation issue in the XPC Services API, which could allow a crafted app to bypass intended event-handler restrictions and modify events in arbitrary apps. The Apple advisor...
CVE-2016-1760: Improper Access Control
The XPC Services API in LaunchServices in Apple iOS before 9.3 allows attackers to bypass intended event-handler restrictions and modify an arbitrary app's events via a crafted app...
PT-2016-1609
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.3 Description The issue is related to the XPC Services API in LaunchServices, which has inadequate access control. This allows an attacker to bypass event-handler restrictions and modify events of arbitrary apps...
CVE-2 0 1 5-3 7 9 5-vulnerability warning-the black bar safety net
0x01 machshark In the previous article I have already several times mentioned machshark it. The tool one uses is that you can make a small c stub function, c-stub, the stub allows you to playback the mach message. As the article mentioned, based on MACH IPC with a state of concept. Although by...
Memory corruption
libxpc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app that sends a malformed XPC message...
CVE-2015-3777
Multiple buffer overflows in blued in the Bluetooth subsystem in Apple OS X before 10.10.5 allow local users to gain privileges via XPC messages...
Buffer overflow
Multiple buffer overflows in blued in the Bluetooth subsystem in Apple OS X before 10.10.5 allow local users to gain privileges via XPC messages...
CVE-2015-3777
CVE-2015-3777 : A buffer overflow in Apple OS X blued (Bluetooth) allows a local user to gain privileges via XPC messages. Affected: OS X before 10.10.5. Impact: local privilege escalation. Mitigation: update to macOS OS X 10.10.5 (security update HT205031) or later. Note: exploitation details ar...
CVE-2015-3777: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple buffer overflows in blued in the Bluetooth subsystem in Apple OS X before 10.10.5 allow local users to gain privileges via XPC messages...
CVE-2015-3795: Improper Restriction of Operations within the Bounds of a Memory Buffer
libxpc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app that sends a malformed XPC message...
PT-2015-1775
Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.10.5 Description The issue is caused by multiple buffer overflows in the Bluetooth subsystem of the operating system, which can be exploited by a local attacker to gain privileges via XPC messages. Recommendatio...
Authentication flaw
Admin Framework in Apple OS X before 10.10.4 does not properly verify XPC entitlements, which allows local users to bypass authentication and obtain admin privileges via unspecified vectors...
Immunity Canvas: OSX_ROOTPIPE2
Name| osxrootpipe2 ---|--- CVE| CVE-2015-3673 Exploit Pack| CANVAS Description| OS X XPC Admin Framework rootpipe 2 local privilege escalation Notes| CVE Name: CVE-2015-3673 VENDOR: Apple Notes: Rootpipe 2 for Mac OS X 10.10.3 Repeatability: Multiple Times References:...