CVE-2007-6261
Mac OS X 10.4-10.5.1 - Denial of Service via Mach-O Binary Integer Overflow
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-6261. PoCs published by mu-b.
AI-analyzed exploit summary This exploit modifies a Mach-O binary to trigger an integer overflow in the `load_threadstack` function, causing a local kernel DoS on macOS X xnu <= 1228.0. It patches the `count` field in the `thread_command` structure to induce an infinite loop.
Description
Integer overflow in the load_threadstack function in the Mach-O loader (mach_loader.c) in the xnu kernel in Apple Mac OS X 10.4 through 10.5.1 allows local users to cause a denial of service (infinite loop) via a crafted Mach-O binary.
Exploits (1)
This exploit modifies a Mach-O binary to trigger an integer overflow in the `load_threadstack` function, causing a local kernel DoS on macOS X xnu <= 1228.0. It patches the `count` field in the `thread_command` structure to induce an infinite loop.