CVE-2019-8641 PoC — 多款Apple产品Foundation组件缓冲区错误漏洞

Source

https://github.com/chia33164/CVE-2019-8641-reproduction

Associated Vulnerability

Title:多款Apple产品Foundation组件缓冲区错误漏洞 (CVE-2019-8641)
Description:Apple iOS等都是美国苹果（Apple）公司的产品。Apple iOS是一套为移动设备所开发的操作系统。Apple tvOS是一套智能电视操作系统。Apple macOS Mojave是一套专为Mac计算机所开发的专用操作系统。Foundation是其中的一个为所有应用程序提供基本系统服务的框架。多款Apple产品中的Foundation组件存在缓冲区错误漏洞。远程攻击者可利用该漏洞造成应用程序意外终止或执行任意代码。以下产品及版本受到影响：Apple iOS 12.4之前版本；tvOS 12.4

Description

The reproduction code for CVE-2019-8641.

Readme

# CVE-2019-8641 Reproduction

> This is the reproduction code for CVE-2019-8641 for education purpose only!

File Snapshot


 [4.0K]  /data/pocs/fdb40616734ab6791447a6dcf1cf5757f9f2d960
├── [   0]  gen_payload_calcpop.py
├── [   0]  gen_payload_dealloc.py
├── [2.2K]  gen_payload_defer.py
├── [1.9K]  hook.js
├── [5.4K]  nsarchiver.py
├── [7.6K]  pwn.py
├── [ 107]  README.md
└── [ 258]  sendMessage.applescript

0 directories, 8 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!