Microsoft Xamarin Studio CVE-2017-8665 Local Privilege Escalation Vulnerability

Bugtraq ID:	100308
Class:	Unknown
CVE:	CVE-2017-8665
Remote:	No
Local:	Yes
Published:	Aug 14 2017 12:00AM
Updated:	Aug 14 2017 12:00AM
Credit:	Yorick Koster Securify B.V.
Vulnerable:	Microsoft Xamarin.iOS 0 Microsoft Xamarin Studio for Mac 6.2.1 (build 3) Microsoft Xamarin Studio for Mac 6.3 (build 863)
Not Vulnerable:

Microsoft Xamarin Studio CVE-2017-8665 Local Privilege Escalation Vulnerability

Microsoft Xamarin Studio is prone to a local privilege-escalation vulnerability.

A local attacker can leverage this issue to execute arbitrary code with elevated root privileges.

Microsoft Xamarin Studio CVE-2017-8665 Local Privilege Escalation Vulnerability

The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.

Microsoft Xamarin Studio CVE-2017-8665 Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Microsoft Xamarin Studio CVE-2017-8665 Local Privilege Escalation Vulnerability

References:

• Microsoft Homepage (Microsoft)
  
• Xamarin Studio for Mac API documentation update affected by local privilege esca (securify.nl)
  
• CVE-2017-8665 | Xamarin.iOS Elevation Of Privilege Vulnerability (Microsoft)