CVE-2017-7047 PoC — 多款Apple产品libxpc 安全漏洞

Source

Associated Vulnerability

Title:多款Apple产品libxpc 安全漏洞 (CVE-2017-7047)
Description:Apple iOS等都是美国苹果（Apple）公司的产品。Apple iOS是为移动设备所开发的一套操作系统；tvOS是一套智能电视操作系统；watchOS是一套智能手表操作系统。libxpc是其中的一个Apple XPC库的开源实现。多款Apple产品中的libxpc组件中存在内存损坏漏洞。攻击者可借助特制的应用程序利用该漏洞以系统权限执行任意代码或造成拒绝服务（内存损坏）。以下产品和版本受到影响：Apple iOS 10.3.3之前的版本；macOS Sierra 10.12.6之前的版本；tvOS

Description

This is an exploit for CVE-2017-7047, Works on 10.3.2 and below.

File Snapshot


 [4.0K]  /data/pocs/180c081ab1f1a7b8da2427296019090bcd844cce
├── [ 12K]  README
├── [854K]  triple_fetch.ipa
├── [1.1M]  triple_fetch.zip
└── [4.7K]  xpc_data_release.zip

0 directories, 4 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!