Published: 20/02/2017 Updated: 03/09/2017

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 940

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

An issue exists in certain Apple products. macOS prior to 10.12.2 is affected. The issue involves the "Bluetooth" component. It allows malicious users to execute arbitrary code in a privileged context or cause a denial of service (type confusion) via a crafted app.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple mac os x

/* Source: bugschromiumorg/p/project-zero/issues/detail?id=974 There are two ways for IOServices to define their IOUserClient classes: they can override IOService::newUserClient and allocate the correct type themselves or they can set the IOUserClientClass key in their registry entry The default implementation of IOService::newUserCli ...

## physmem  physmem is a physical memory inspection tool and local privilege escalation targeting macOS up through 10121 It exploits either [CVE-2016-1825] or [CVE-2016-7617] depending on the deployment target These two vulnerabilities are nearly identical, and exploitation can be done exactly the same They were pa ...

Local privilege escalation through macOS 10.12.1 via CVE-2016-1825 or CVE-2016-7617.

physmem physmem is a physical memory inspection tool and local privilege escalation targeting macOS up through 10121 It exploits either CVE-2016-1825 or CVE-2016-7617 depending on the deployment target These two vulnerabilities are nearly identical, and exploitation can be done exactly the same They were patched in OS X El Capitan 10115 and macOS Sierra 10122, respect

CWE-704 https://support.apple.com/HT207423 http://www.securityfocus.com/bid/94903 http://www.securitytracker.com/id/1037469 https://www.exploit-db.com/exploits/40952/https://nvd.nist.gov https://github.com/bazad/physmem https://www.exploit-db.com/exploits/40952/

CVE-2016-7617

Vulnerability Summary

Vulnerability Trend

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect