Published: 20/05/2016 Updated: 25/03/2019

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 935

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

The kernel in Apple iOS prior to 9.3.2, OS X prior to 10.11.5, tvOS prior to 9.2.1, and watchOS prior to 2.2.1 allows malicious users to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1828, CVE-2016-1829, and CVE-2016-1830.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple tvos
apple iphone os
apple mac os x
apple watchos

/* * flow_divert-heap-overflowc * Brandon Azad * * CVE-2016-1827: Kernel heap overflow in the function flow_divert_handle_app_map_create on OS X * and iOS Exploitation requires root privileges The vulnerability was patched in OS X El Capitan * 10115 and iOS 932 * * This proof-of-concept triggers a kernel panic on OS X Yosemite In E ...

Proof-of-concept exploit for CVE-2016-1827 on OS X Yosemite.

flow_divert-heap-overflow flow_divert-heap-overflow is a proof-of-concept exploit for CVE-2016-1827, which was patched in OS X El Capitan 10115 and iOS 932 The vulnerability is a series of unchecked arithmetic operations on an untrusted length supplied from user space in the function flow_divert_handle_app_map_create Exploitation requires root privileges This proof-of-c

CWE-119 https://support.apple.com/HT206566 http://lists.apple.com/archives/security-announce/2016/May/msg00003.html https://support.apple.com/HT206567 https://support.apple.com/HT206568 https://support.apple.com/HT206564 http://lists.apple.com/archives/security-announce/2016/May/msg00001.html http://lists.apple.com/archives/security-announce/2016/May/msg00002.html http://lists.apple.com/archives/security-announce/2016/May/msg00004.html http://www.securitytracker.com/id/1035890 http://www.securityfocus.com/bid/90691 https://nvd.nist.gov https://github.com/bazad/flow_divert-heap-overflow https://www.exploit-db.com/exploits/44238/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2016-1827

Vulnerability Summary

Vulnerability Trend

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect