Showing 1 - 2 of 2

Files from Matias Eissler

First Active	2010-11-09
Last Active	2011-11-11

Apple OS X Sandbox Predefined Profiles Bypass: Posted Nov 11, 2011; Authored by Core Security Technologies, Anibal Sacco, Matias Eissler | Site coresecurity.com; Core Security Technologies Advisory - Apple OS X suffered from a sandbox predefined profiles bypass vulnerability. Several of the default pre-defined sandbox profiles do not properly limit all the available mechanisms and therefore allow exercising part of the restricted functionality. Namely, sending Apple events is possible within the no-network sandbox (kSBXProfileNoNetwork). A compromised application hypothetically restricted by the use of the no-network profile may have access to network resources through the use of Apple events to invoke the execution of other applications not directly restricted by the sandbox.; tags | exploit, bypass; systems | apple, osx; advisories | CVE-2011-1516; SHA-256 | a93c8053536e7abfedb811843ec4811b01921f6a36f6987012ab0bbdb0ab1c23; Download | Favorite | View

Core Security Technologies Advisory 2010.0825: Posted Nov 9, 2010; Authored by Core Security Technologies, Anibal Sacco, Matias Eissler | Site coresecurity.com; Core Security Technologies Advisory - The Apple Type Services is prone to memory corruption due a sign mismatch vulnerability when handling the last offset value of the CharStrings INDEX structure. This vulnerability could be used by a remote attacker to execute arbitrary code, by enticing the user of Mac OS X v10.5.x to view or download a PDF document containing a embedded malicious CFF font.; tags | advisory, remote, arbitrary; systems | apple, osx; advisories | CVE-2010-1797; SHA-256 | 68f4efdb58f840ab80355a23048b12dea182facc85054b76571b1964d5254a0e; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days