CVE-2017-7047

EPSS 6.7%

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "libxpc" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

Productos afectados

n/a · n/a

PoCs públicas encontradas — 4

githubgithub.com/JosephShenton/Triple_Fetch-Kernel-Creds★ 7 githubgithub.com/q1f3/Triple_fetch★ 0 cve_referencewww.exploit-db.com/exploits/42407/no verificado exploitdbwww.exploit-db.com/exploits/42407no verificado

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://support.apple.com/HT207922 https://support.apple.com/HT207923 https://support.apple.com/HT207924 https://support.apple.com/HT207925 https://www.exploit-db.com/exploits/42407/http://www.securityfocus.com/bid/99883 http://www.securitytracker.com/id/1038950