Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The CFPlugIn in Core Foundation framework in Mac OS X allows user supplied libraries to be loaded, which could allow local users to gain privileges.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mac OS X CoreFoundation本地权限提升漏洞
Vulnerability Description
Mac OS X是一款使用在Mac机器上的操作系统,基于BSD系统。 Apple Mac OS X CoreFoundation存在库装载处理问题及缓冲区溢出,本地攻击者可以利用这个漏洞获得ROOT权限 Apple报告本地用户可以使用CoreFoundation CFPlugIn的应用程序装载任意用户提供的库而获得ROOT权限[CVE: CAN-2004-0821] 。 另外本地用户可以修改部分环境变量在CoreFoundation中触发缓冲区溢出,可以以ROOT进程权限执行任意指令[CVE: CAN-2
CVSS Information
N/A
Vulnerability Type
N/A