PT-2023-8347 · Apple · Apple Macos

Ivan Fratric · Publicado 2023-12-11 · Atualizado 2024-02-02 · CVE-2023-42882

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS versions prior to 14.2

Description The issue is related to a buffer overflow in the AppleVA component of the macOS operating system, which can lead to arbitrary code execution when processing an image. This is due to improper memory handling.

Recommendations For versions prior to 14.2, update to macOS Sonoma 14.2 to resolve the issue. As a temporary workaround, consider avoiding the processing of images from untrusted sources until the update is applied.

Exploit

Correção

Buffer Overflow

Memory Corruption

Enumeração de Fraquezas

CWE-119

CWE-787

Identificadores relacionados

BDU:2024-00536

CVE-2023-42882

Produtos afetados

Apple Macos

Referências · 14

• 🔥 https://github.com/AkshatM1707/Automated-Exploitation-of-SQL-Injection · Exploit
• https://twitter.com/ksg93rd/status/1748361366526742855 · Publicação no Twitter
• https://twitter.com/akaclandestine/status/1748193558467613014 · Publicação no Twitter
• https://cybersecurity-help.cz/vdb/SB2023121146 · Nota
• https://bdu.fstec.ru/vul/2024-00536 · Nota de Segurança
• https://support.apple.com/kb/HT214036 · Nota
• https://osv.dev/vulnerability/CVE-2023-42882 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-42882 · Nota de Segurança
• https://t.me/cvenotify/63534 · Publicação no Telegram
• https://t.me/cybersecuritytechnologies/9810 · Publicação no Telegram
• http://seclists.org/fulldisclosure/2023/Dec/9 · Nota
• https://twitter.com/CVEnew/status/1734379205389906238 · Publicação no Twitter
• http://packetstormsecurity.com/files/176536/macOS-AppleVADriver-Out-Of-Bounds-Write.html · Nota
• https://support.apple.com/en-us/HT214036 · Aviso do Fabricante