Apple Mac OS X XPC Type Confusion Local Privilege Escalation Vulnerability

Bugtraq ID:	71992
Class:	Design Error
CVE:	CVE-2014-8835
Remote:	No
Local:	Yes
Published:	Jan 08 2015 12:00AM
Updated:	Apr 13 2015 08:01PM
Credit:	Ian Beer of Google Project Zero
Vulnerable:
Not Vulnerable:

Apple Mac OS X XPC Type Confusion Local Privilege Escalation Vulnerability

The following proof of concept code is available:

• /data/vulnerabilities/exploits/71992.c

Apple Mac OS X XPC Type Confusion Local Privilege Escalation Vulnerability

Solution:
Reportedly the issue is fixed, however Symantec has not confirmed this. Please contact the vendor for more information.

Apple Mac OS X XPC Type Confusion Local Privilege Escalation Vulnerability

References:

• Apple Mac OS X Homepage (Apple)
  
• OS X privilege escalation due to XPC type confusion in sysmond (with exploit) (Google)