Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.2
CVSSv2

CVE-2015-7084

Published: 11/12/2015 Updated: 08/03/2019
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
VMScore: 730
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Subscribe to Apple

Vulnerability Summary

The kernel in Apple iOS prior to 9.2, OS X prior to 10.11.2, tvOS prior to 9.1, and watchOS prior to 2.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-7083.

Vulnerable Product Search on Vulmon Subscribe to Product

apple iphone os

apple mac os x

apple watchos

apple tvos

Exploits

Exploit DB: Apple Mac OSX / iOS Kernel - iokit Registry Iterator Manipulation Double-Free
/* Source: codegooglecom/p/google-security-research/issues/detail?id=598 The userspace MIG wrapper IORegistryIteratorExitEntry invokes the following kernel function: kern_return_t is_io_registry_iterator_exit_entry( io_object_t iterator ) { bool didIt; ...
Exploit DB: Apple Mac OSX / iOS - Unsandboxable Kernel Code Exection Due to iokit Double Release in IOKit
Source: codegooglecom/p/google-security-research/issues/detail?id=620 I wanted to demonstrate that these iOS/OS X kernel race condition really are exploitable so here's a PoC which gets RIP on OS X The same techniques should transfer smoothly to iOS :) The bug is here: void IORegistryIterator::reset( void ) { while( exitEntry()) ...

References

CWE-119http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.htmlhttp://lists.apple.com/archives/security-announce/2015/Dec/msg00005.htmlhttps://support.apple.com/HT205637http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.htmlhttps://support.apple.com/HT205641https://support.apple.com/HT205635http://lists.apple.com/archives/security-announce/2015/Dec/msg00002.htmlhttps://support.apple.com/HT205640http://www.securityfocus.com/bid/78719https://www.exploit-db.com/exploits/39366/https://www.exploit-db.com/exploits/39357/http://www.securitytracker.com/id/1034344https://nvd.nist.govhttps://www.exploit-db.com/exploits/39366/
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-38028CVE-2024-32406CVE-2024-25624IMAPCVE-2024-2310CVE-2024-0874CVE-2024-20359XXEremote code execution
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook