Exploitation Summary
EIP tracks 5 public exploits for CVE-2017-2370. PoCs published by Google Security Research, Peterpan0927, Rootkitsmm-zz.
AI-analyzed exploit summary This exploit leverages a kernel heap overflow in the `mach_voucher_extract_attr_recipe_trap` function due to improper validation of user-controlled input, allowing arbitrary kernel read/write on macOS Sierra 10.12.1 and iOS 10.2.
Description
An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. macOS before 10.12.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (buffer overflow) via a crafted app.
Exploits (5)
This exploit leverages a kernel heap overflow in the `mach_voucher_extract_attr_recipe_trap` function due to improper validation of user-controlled input, allowing arbitrary kernel read/write on macOS Sierra 10.12.1 and iOS 10.2.
This is a detailed writeup explaining the exploitation of CVE-2017-2370, a heap overflow vulnerability in the `mach_voucher_extract_attr_recipe_trap` function in iOS 10 and macOS 10.12. It describes the vulnerability, heap feng shui techniques, and steps to achieve privilege escalation.
This is a kernel arbitrary read/write exploit for CVE-2017-2370 targeting iOS 10.2. It leverages a heap overflow in the mach_voucher_extract_attr_recipe_trap function to achieve local privilege escalation (LPE) on vulnerable iOS devices.
This repository contains a kernel arbitrary read/write exploit for CVE-2017-2370, targeting iOS 10.2. The exploit leverages a heap overflow in the `mach_voucher_extract_attr_recipe_trap` function to achieve privilege escalation.
This is a kernel arbitrary read/write exploit for CVE-2017-2370 targeting iOS 10.2. It leverages a heap overflow in the `mach_voucher_extract_attr_recipe_trap` function to achieve privilege escalation via controlled kernel memory corruption.
References (8)
Scores
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H