This Metasploit module serves an OSX app (as a zip) that contains no Info.plist, which bypasses gatekeeper in macOS versions prior to 11.3. If the user visits the site on Safari, the zip file is automatically extracted, and clicking on the downloaded file will automatically launch the payload. If the user visits the site in another browser, the user must click once to unzip the app, and click again in order to execute the payload.
f887e4c7bc716bf125006af5d7e5dcacApple Security Advisory 2021-05-03-3 - watchOS 7.4.1 addresses a code execution vulnerability.
99ccbf016b73734b1b6cc11ee6424f31Apple Security Advisory 2021-05-03-4 - macOS Big Sur 11.3.1 addresses code execution and integer overflow vulnerabilities.
d0ff0760d53f2d697a10897f9f169763Apple Security Advisory 2021-05-03-1 - iOS 14.5.1 and iPadOS 14.5.1 addresses code execution and integer overflow vulnerabilities.
a8a4944ad26eb954c1cb9c551ceb39d3Apple Security Advisory 2021-05-03-2 - iOS 12.5.3 addresses buffer overflow, code execution, integer overflow, and use-after-free vulnerabilities.
82523f50ed01be666ae29e54a3e854f7Apple Security Advisory 2021-04-26-10 - Xcode 12.5 addresses an arbitrary code execution vulnerability.
2c6f6cb6441710436e39f98eee4c3335Apple Security Advisory 2021-04-26-9 - iTunes 12.11.3 for Windows addresses cross site scripting and use-after-free vulnerabilities.
668cde28836e64c17d0bbc33969dc89fApple Security Advisory 2021-04-26-8 - iCloud for Windows 12.3 addresses cross site scripting and use-after-free vulnerabilities.
a9f491649e323a6f4652efcef5f44e60Apple Security Advisory 2021-04-26-7 - Safari 14.1 addresses cross site scripting and use-after-free vulnerabilities.
172a622d68962ff279256a61a37f14fbApple Security Advisory 2021-04-26-5 - watchOS 7.4 addresses buffer overflow, bypass, code execution, cross site scripting, denial of service, double free, heap corruption, out of bounds read, out of bounds write, and use-after-free vulnerabilities.
14cccbfd5ffa206e0abdfc29c80fd160Apple Security Advisory 2021-04-26-6 - tvOS 14.5 addresses buffer overflow, bypass, code execution, cross site scripting, denial of service, double free, heap corruption, out of bounds read, out of bounds write, and use-after-free vulnerabilities.
d1196bcc1613dbb6b8f54cd25ea9dea2Apple Security Advisory 2021-04-26-4 - Security Update 2021-003 Mojave addresses buffer overflow, code execution, denial of service, double free, integer overflow, out of bounds read, out of bounds write, and use-after-free vulnerabilities.
b57ad74ebe7224e818dfd682616dc528Apple Security Advisory 2021-04-26-3 - Security Update 2021-002 Catalina addresses buffer overflow, bypass, code execution, denial of service, double free, integer overflow, out of bounds read, out of bounds write, and use-after-free vulnerabilities.
9f006d6e8a5b2d11ef5b60478ef0104cApple Security Advisory 2021-04-26-2 - macOS Big Sur 11.3 addresses buffer overflow, bypass, code execution, cross site scripting, denial of service, double free, heap corruption, integer overflow, out of bounds read, out of bounds write, and use-after-free vulnerabilities.
8b939e0c156d2772ca0874561cc78496Apple Security Advisory 2021-04-26-1 - iOS 14.5 and iPadOS 14.5 addresses buffer overflow, bypass, code execution, cross site scripting, denial of service, double free, heap corruption, out of bounds read, out of bounds write, and use-after-free vulnerabilities.
eb2388e66c9270c29f072d054510896aApple Security Advisory 2021-03-26-3 - watchOS 7.3.3 addresses a cross site scripting vulnerability.
6d5ee4fd808cd04e54d5ac1dece8156aApple Security Advisory 2021-03-26-2 - iOS 12.5.2 addresses a cross site scripting vulnerability.
92e0cb5133e5e8ecb6931d5522ec5393Apple Security Advisory 2021-03-26-1 - iOS 14.4.2 and iPadOS 14.4.2 addresses a cross site scripting vulnerability.
a24404039fa9cf5fc55928412c9d7017Apple Security Advisory 2021-03-08-4 - watchOS 7.3.2 addresses a code execution vulnerability.
e57471ba583baeb6cb1ca308c601959fApple Security Advisory 2021-03-08-3 - Safari 14.0.3* addresses a code execution vulnerability.
70ae5ea9978c9b1d43fd7d5e90a7c55bApple Security Advisory 2021-03-08-2 - macOS Big Sur 11.2.3 addresses a code execution vulnerability.
5e399d19afa8e5fadb4f8e8ddc7deb19Apple Security Advisory 2021-03-08-1 - iOS 14.4.1 and iPadOS 14.4.1 addresses a code execution vulnerability.
06c77493f484bf787aa128b7482af828Apple Security Advisory 2021-02-09-1 - macOS Big Sur 11.2.1, macOS Catalina 10.15.7 Supplemental Update, and macOS Mojave 10.14.6 Security Update 2021-002 address code execution and out of bounds write vulnerabilities.
8d1bfb10d55eb1550d949aa299d02051Apple CoreText libType1Scaler.dylib suffers from a heap out-of-bounds-write due to an integer overflow vulnerability in STOREWV othersubr.
b33deb9c9fd77bb9f85fcccf5c952979Apple CoreText libFontParser.dylib suffers from a stack corruption vulnerability in the handling of /BlendDesignPositions Type 1 objects.
c178252e4ec3ca797a19785947f03896
© 2020 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed