Apple OS X IOUSBInterfaceUserClient Out-Of-Bounds Indexing Privilege Escalation Vulnerability

🗓️ 22 Mar 2016 00:00:00Reported by Juwei Lin of Trend MicroType

zdi🔗 www.zerodayinitiative.com👁 19 Views

Apple OS X IOUSBInterfaceUserClient Out-Of-Bounds Indexing Privilege Escalation Vulnerability allows arbitrary code execution by local attackers, requiring user interaction to exploit. The flaw exists in IOUSBInterfaceUserClient interface's handling, enabling privilege escalation and code execution under kernel context

Reporter	Title	Published	Views	Family All 17
0day.today	Apple Mac OSX - Kernel Code Execution Due to Lack of Bounds Checking in AppleUSBPipe::Abort	23 Mar 201600:00	–	zdt
Tenable Nessus	Mac OS X < 10.11.4 Multiple Vulnerabilities	2 Sep 201600:00	–	nessus
Tenable Nessus	Mac OS X 10.11.x < 10.11.4 Multiple Vulnerabilities	27 May 201600:00	–	nessus
Tenable Nessus	Mac OS X 10.11.x < 10.11.4 Multiple Vulnerabilities	22 Mar 201600:00	–	nessus
Gitee	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Mac_Os_X	6 Sep 202500:30	–	gitee
Apple	About the security content of OS X El Capitan v10.11.4 and Security Update 2016-002	21 Mar 201600:00	–	apple
Apple	About the security content of OS X El Capitan v10.11.4 and Security Update 2016-002 - Apple Support	23 Jan 201703:54	–	apple
BDU FSTEC	The vulnerability of the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.	6 Apr 201600:00	–	bdu_fstec
Circl	CVE-2016-1749	23 Mar 201600:00	–	circl
CNVD	Apple OS X IOUSBInterfaceUserClient Elevation of Privilege Vulnerability	23 Mar 201600:00	–	cnvd