CVE-2014-4404
HIGH KEVMac OS X IOKit Keyboard Driver Root Privilege Escalation
Title source: metasploitExploitation Summary
CVE-2014-4404 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added February 10, 2022.
EIP tracks 2 public exploits from researchers including Metasploit, Ian Beer, joev, including a Metasploit module exploits/osx/local/iokit_keyboard_root.
AI-analyzed exploit summary This Metasploit module exploits a heap overflow in the IOHIKeyboardMapper::parseKeyMapping function in Mac OS X before 10.10, combined with a kASLR bypass via an IORegistry bug, to achieve root privilege escalation. It writes a binary exploit and payload to temporary files, executes them, and is tested on Mavericks 10.9.5.
Description
Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted key-mapping properties.
Exploits (2)
This Metasploit module exploits a heap overflow in the IOHIKeyboardMapper::parseKeyMapping function in Mac OS X before 10.10, combined with a kASLR bypass via an IORegistry bug, to achieve root privilege escalation. It writes a binary exploit and payload to temporary files, executes them, and is tested on Mavericks 10.9.5.
This Metasploit module exploits a heap overflow in IOHIKeyboardMapper::parseKeyMapping (CVE-2014-4404) to achieve local privilege escalation on Mac OS X before 10.10. It leverages a kASLR bypass via IORegistry and executes a payload to gain root privileges.
References (13)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H