Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 09/10/2015 Updated: 08/12/2016

CVSS v2 Base Score: 1.9 | Impact Score: 2.9 | Exploitability Score: 3.4

VMScore: 169

Vector: AV:L/AC:M/Au:N/C:N/I:P/A:N

The Telephony component in Apple OS X prior to 10.11, when the Continuity feature is enabled, allows local users to bypass intended telephone-call restrictions via unspecified vectors.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple mac os x

handleCurrentCallsChanged XPC Abusing xpc for to handle call status changes on iOS Tested on iPhone 8 , 162 (palera1n) entitlements (not all necessary): <key>comapplesecurityexceptionmach-lookupglobal-name</key> <array> <string>comappletelephonyutilitiescallservicesdaemoncallstatecontroller</string>

NVD-CWE-noinfo https://support.apple.com/HT205267 http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html http://www.securityfocus.com/bid/76908 http://www.securitytracker.com/id/1033703 https://nvd.nist.gov https://github.com/fr3ns1s/handleCurrentCallsChangedXPC

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2015-3785

Vulnerability Summary

Github Repositories

References

Vulmon Search

About

Products

Connect