Exploitation Summary
EIP tracks 1 public exploit for CVE-2015-3693. PoCs published by Google Security Research.
AI-analyzed exploit summary This PoC exploits the DRAM 'rowhammer' vulnerability to escape Native Client's x86-64 sandbox by inducing bit flips in read-only code. It leverages the CLFLUSH instruction to manipulate memory, bypassing NaCl's validator.
Description
Apple Mac EFI before 2015-001, as used in OS X before 10.10.4 and other products, does not properly set refresh rates for DDR3 RAM, which might make it easier for remote attackers to conduct row-hammer attacks, and consequently gain privileges or cause a denial of service (memory corruption), by triggering certain patterns of access to memory locations.
Exploits (1)
This PoC exploits the DRAM 'rowhammer' vulnerability to escape Native Client's x86-64 sandbox by inducing bit flips in read-only code. It leverages the CLFLUSH instruction to manipulate memory, bypassing NaCl's validator.