CVE-2015-7007
macOS < 10.11.1 - Unauthenticated AppleScript Execution Bypass
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2015-7007.
PoCs published by Metasploit, joev, including Metasploit module exploits/osx/browser/safari_user_assisted_applescript_exec.
AI-analyzed exploit summary This Metasploit module exploits CVE-2015-7007 by tricking a user into pressing cmd-R in Safari, which executes arbitrary AppleScript code. The exploit leverages the applescript:// URL scheme to bypass user confirmation and achieve remote command execution.
Description
Script Editor in Apple OS X before 10.11.1 allows remote attackers to bypass an intended user-confirmation requirement for AppleScript execution via unspecified vectors.
Exploits (2)
This Metasploit module exploits CVE-2015-7007 by tricking a user into pressing cmd-R in Safari, which executes arbitrary AppleScript code. The exploit leverages the applescript:// URL scheme to bypass user confirmation and achieve remote command execution.
This Metasploit module exploits a vulnerability in Safari on Mac OS X before 10.11.1 by tricking users into pressing cmd-R to execute arbitrary AppleScript code. It leverages the applescript:// URL scheme to bypass user confirmation and execute a reverse shell payload.