PT-2015-3110 · Apple · Tvos+3

Ianbeer

·

Publicado

2015-12-11

·

Atualizado

2019-03-08

·

CVE-2015-7047

CVSS v2.0

7.2

Alta

VetorAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions iOS versions prior to 9.2 OS X versions prior to 10.11.2 tvOS versions prior to 9.1 watchOS versions prior to 2.1
Description The issue allows local users to gain privileges via a crafted mach message that is misparsed. It exists due to insufficient input validation in the kernel of the operating systems, which can be exploited by an attacker to elevate their privileges using a specially crafted message.
Recommendations For iOS versions prior to 9.2, update to version 9.2 or later. For OS X versions prior to 10.11.2, update to version 10.11.2 or later. For tvOS versions prior to 9.1, update to version 9.1 or later. For watchOS versions prior to 2.1, update to version 2.1 or later.

Exploit

Correção

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2016-00320
CVE-2015-7047

Produtos afetados

Os X
Ios
Tvos
Watchos