Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-0162. PoCs published by MoAB.
AI-analyzed exploit summary This exploit patches the ApplicationEnhancer binary to inject malicious code and downloads a backdoor binary. It modifies specific offsets in the binary to alter its behavior and replaces a resource file with a remote payload.
Description
Unsanity Application Enhancer (APE) 2.0.2 installs with insecure permissions for the (1) ApplicationEnhancer binary and the (2) /Library/Frameworks/ApplicationEnhancer.framework directory, which allows local users to gain privileges by modifying or replacing the binary or library files.
Exploits (1)
This exploit patches the ApplicationEnhancer binary to inject malicious code and downloads a backdoor binary. It modifies specific offsets in the binary to alter its behavior and replaces a resource file with a remote payload.