CVE-2014-4404

This Metasploit module exploits a heap overflow in the IOHIKeyboardMapper::parseKeyMapping function in Mac OS X before 10.10, combined with a kASLR bypass via an IORegistry bug, to achieve root privilege escalation. It writes a binary exploit and payload to temporary files, executes them, and is tested on Mavericks 10.9.5.

This Metasploit module exploits a heap overflow in IOHIKeyboardMapper::parseKeyMapping (CVE-2014-4404) to achieve local privilege escalation on Mac OS X before 10.10. It leverages a kASLR bypass via IORegistry and executes a payload to gain root privileges.