Lucene search

K
zdiAca055c25829115b84ad07e72a4eff16ZDI-16-638
HistoryDec 15, 2016 - 12:00 a.m.

Apple OS X WindowServer _XRegisterCursorWithData Memory Corruption Privilege Escalation Vulnerability

2016-12-1500:00:00
aca055c25829115b84ad07e72a4eff16
www.zerodayinitiative.com
17

EPSS

0.003

Percentile

71.7%

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple OS X. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the CoreGraphics module. The issue lies in the failure to properly validate user-supplied data which can result in a memory corruption condition. An attacker can leverage this vulnerability to escalate privileges under the context of WindowServer.

EPSS

0.003

Percentile

71.7%