Exploitation Summary
EIP tracks 3 public exploits for CVE-2017-7047. PoCs published by Google Security Research, JosephShenton, q1f3.
AI-analyzed exploit summary This exploit leverages a logic error in libxpc (CVE-2017-7047) to send xpc_data objects backed by shared memory, allowing the sender to modify the memory while the receiver processes it. It targets NSXPC services, such as airportd, to achieve controlled memory corruption via a race condition.
Description
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "libxpc" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Exploits (3)
This exploit leverages a logic error in libxpc (CVE-2017-7047) to send xpc_data objects backed by shared memory, allowing the sender to modify the memory while the receiver processes it. It targets NSXPC services, such as airportd, to achieve controlled memory corruption via a race condition.
This repository contains a proof-of-concept exploit for CVE-2017-7047, targeting a logic error in libxpc on iOS devices prior to 10.3.3. The exploit leverages a race condition to send malicious xpc_data objects backed by shared memory, ultimately achieving root privileges and task_for_pid capabilities.
This is a proof-of-concept exploit for CVE-2017-7047, targeting a logic error in libxpc on iOS. It leverages a heap overflow primitive to achieve remote code execution and deploy a custom lldb debugserver stub for debugging arbitrary processes.
References (7)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H