Entreprise d'experts en Sécurité Informatique : Audits et conseils en cybersécurité
Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com


CVE-2016-7633

Description

An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "Directory Services" component. It allows local users to gain privileges or cause a denial of service (use-after-free) via unspecified vectors.

POC

Reference

- http://www.securityfocus.com/bid/94903

- https://www.exploit-db.com/exploits/40954/

Github

- https://github.com/ExploitsJB/async_wake_ios

- https://github.com/Jailbreaks/async_wake_ios

- https://github.com/Jailbreaks/iosurface_uaf-ios

- https://github.com/blacktop/async_wake