(Pwn2Own) Apple macOS Dock Service DSSetDesktopForDisplayAndSpace Uninitialized Pointer Privilege Escalation Vulnerability

🗓️ 05 Nov 2018 00:00:00Reported by MWR Labs - Alex PlaskettGeorgi GeshevFabian BeterkeType

zdi🔗 www.zerodayinitiative.com👁 22 Views

Apple macOS Dock Service DSSetDesktopForDisplayAndSpace Uninitialized Pointer Privilege Escalation Vulnerability allows local attackers to execute arbitrary code on macOS by exploiting a flaw in the handling of Mach messages to the Dock, due to improper initialization of a pointer

Reporter	Title	Published	Views	Family All 19
Tenable Nessus	macOS 10.13.x < 10.13.5 Multiple Vulnerabilities	10 Apr 201900:00	–	nessus
Tenable Nessus	macOS 10.13.x < 10.13.5 Multiple Vulnerabilities	5 Jun 201800:00	–	nessus
Apple	About the security content of macOS High Sierra 10.13.5, Security Update 2018-003 Sierra, Security Update 2018-003 El Capitan	1 Jun 201800:00	–	apple
Apple	About the security content of macOS High Sierra 10.13.5, Security Update 2018-003 Sierra, Security Update 2018-003 El Capitan - Apple Support	8 Oct 201903:27	–	apple
BDU FSTEC	The vulnerability of the Accessibility Framework component of the Mac OS X operating system allows a perpetrator to execute arbitrary code with system privileges or disclose protected information.	19 Jul 201800:00	–	bdu_fstec
CNVD	Apple macOS High Sierra Accessibility Framework Information Disclosure Vulnerability	4 Jun 201800:00	–	cnvd
CVE	CVE-2018-4196	8 Jun 201818:00	–	cve
Cvelist	CVE-2018-4196	8 Jun 201818:00	–	cvelist
EUVD	EUVD-2018-15982	7 Oct 202500:30	–	euvd
NVD	CVE-2018-4196	8 Jun 201818:29	–	nvd